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BY ANDY PATRIZIO 

News that Microsoft plans to 
use XML-based file formats in 
Oifice 12 and submit the 
formats to the Ecma Interna- 
tional vendor consortium to 
start them on the road to stan- 
dardization should be greeted 
with cautious optimism. So says 
one analyst who has followed 
the company and its battles 
with the state of Massachusetts. 
Kyle McNabb, senior ana- 
lyst at Forrester Research, 
said Microsoft's plans to stan- 



dardize the file formats is a 
positive move for everyone, 
but suggested keeping an eye 
on Microsoft. "We tell our 
clients, 'Make sure Microsoft 
follows through with its com- 
mitment to make it a truly 
independent, open standard,' 
and that would include [that] 
there's no proprietary aspects 
to the standard at all," he said. 
The company first an- 
nounced that Office would use 
XML as its data file format at its 
► continued on page 20 



Sun's Move 
To Free Tools 
Complete 



BY ALEX HANDY 

In a move that culminated with 
last year's release of an open 
version of Solaris, Sun Micro- 
systems has all but completed 
its shift away from selling soft- 
ware, electing instead to mone- 
tize support and service agree- 
ments. 

Sun had long said it would 
offer its myriad tools and soft- 
ware packages to the open- 



source community, and deliv- 
ered on that promise late last 
year by announcing that its Java 
Enterprise System, Nl man- 
agement software and all devel- 
oper tools will be available free 
of charge, along with source 
code. 

John R. Rymer, vice presi- 
dent of application development 
and infrastructure at Forrester 
► continued on page 18 



SUN TIME FOR OPEN SOURCE 


Sun has been dabbling 


in open-source software 


since 1999. The company 


promises that it will release more of its software to the open-source com- 


munity in the coming months. A look at the contributions: 


1999: Tomcat 


Sept. 2003: 


March 2005: 


(JSP & Servlets) 


JavaHelp (SWING) 


WS Management 


Jan. 1999: Jini 


Oct. 2003: Java Shared 


May 2005: Jini again! 


June 2000: NetBeans 


Data Toolkit 


Nov. 2005: Sun N1 


April 2001: JXTA 


March 2003-April 2004: 


management software, 


July 2001: GridEngine 


Adventure Builder 


Java Enterprise System, 


June 2003: java.net 


Feb. 2004: Tonic (Solaris 


Sun Studio 11 


July 2003: J2EE 


operating system parts 




Aug. 2003: JAXB, 


& kernel) 




JAX-RPC (XMt) 


June 2004: Looking Glass 


Source: Sun Microsystems 



The Year Told a Tale of Two Platforms 



BY ALAN ZEICHICK 

It was the best of times, it was 
the worst of times, it was the age 
of Microsoft, it was the age of 
Eclipse, it was the epoch of Java, 
it was the epoch of .NET, we had 
everything before us, we had 
nothing before us, it was 
the spring of collabo- 
ration, it was the win- 
ter of outsourcing, we 
were all going direct to 
service-oriented architectures — 
in short, the period was so far 
like the present period, that 
some of its noisiest authorities 
insisted on its being received, for 
good or for evil, in the superla- 
tive degree of comparison only, 
except that end-user license 
agreements precluded the publi- 
cation of benchmarks in those 
comparisons. 




There was a king with a large 
company, who brought forth 
Visual Studio 2005 and Team 
System and SQL Server 2005, 
and ushered forth collaboration 
and application life cycle man- 
agement unto the land of Win- 
dows, on the throne 
of Microsoft. There 



were many princes 
with fair faces who 
wrought open-source 
technologies, verily stretched 
forth from Linux to Macintosh, 
seeing not only a tools frame- 
work with a plug-in infrastruc- 
ture but also a rich client plat- 
form, on the board of Eclipse. 

In both countries it was 
clearer than crystal to the lords 
of State, as well as to software 
architects, that things in gener- 
al were settled forever. 



It was the year two thousand 
and five, being ordered the 
sixth of the new millennium, 
except for those who insist that 
the new millennium started not 
in the year 2000. 

Yet not all of that year's tid- 
ings centered around these dis- 
parate, heterogeneous king- 
doms. The Sun King and his 
Rlack Prince advanced in all 
directions at once, embracing 
AMD, extending and renaming 
Java, offering software crown 
jewels as open source, all in the 
pursuit of subscription revenue 
streams. The Oracle consumed 
its archcompetitor, seemingly 
focused more on applications 
than on platforms. The Lords of 
Armonk captured the Atlantic, 
whilst SCO, the Scourge of 
Open Source Software, accom- 




plished nothing whatsoever. 

The year saw scandal affect- 
ing the houses of Islandia and 
Mercury, even while all and 
sundry saw new standards, new 
specifications, new acronyms 
bespattered with rustic mire. 
Yet the Coder and the Tester 
work unceasingly, work silently, 
locally, nearshore and offshore, 
and no one heard them as they 
went about with muffled tread 
to the nearest Starbucks WiFi 
hotspot. 

Across the land there was 
scarcely an amount of order 
and protection to justify much 
national boasting; daring bur- 
glaries by hackers and highway 
data-robberies took place in the 
servers every night; end users 
were publicly cautioned not to 
log in without encryption, or to 
deploy without audit. 

All these things, and a thou- 
sand like them, came to pass in 
and close upon the dear old year 
two thousand and five. Envi- 
roned by them, while the Coder 
and Tester worked unheeded, 
the king with the large company, 
and princes with fair faces, car- 
ried their divine rights, and con- 
ducted their Greatness along the 
Vistas that lay before them. I 
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Installation Should Not Be an Afterthought 

InstallShield 11.5 helps developers capture target needs as code is being written 



BY DAVID RUBINSTEIN 

Distributed development, it has 
been documented, creates a 
number of development prob- 
lems — code sharing and test- 
ing, requirements understand- 
ing and management oversight 
among them. 

Digital rights management 
solution provider Macrovision 
would add installation to the list 
of things that distributed devel- 
opment makes more difficult. 

To address the problem, the 
company introduced FLEXnet 
InstallShield Collaboration, an 
add-on module released in late 
November with InstallShield 
11.5 that is designed to enable 
developers to capture installa- 
tion requirements as they write 
their code. 

Bob Corrigan, product man- 
ager for InstallShield, explained 
that after InstallShield was 
acquired by Macrovision in 
2003, the InstallShield team 
had to work with development 
teams around the globe, and 
found that communication 
issues increased the amount 
of time it took to do a build, and 
said there was more back- 
and-forth over issues than 
he was used to when dealing 
with developers all located in 
one place. 

"Most teams think about 
installation last instead of first," 
Corrigan said. "If you're not 
thinking about how to go to 
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Tags within FLEXnet InstallShield Collaboration allow developers to specify runtime requirements and detail other 
information needed during the install phase. 



market early in the process, 
you're going to have problems." 

The Collaboration module, 
he said, gives developers an 
easy way to record data regard- 
ing such things as runtime vari- 
ables, registry entries, dynamic 
links and localization while they 
are coding. 

"It's all captured into an 
XML file which is easy to 
share," he noted. Giving 
developers the ability to share 



the information about installa- 
tion should improve the quali- 
ty of the deliverable software, 
whether it's for sale or for use 
internally, he added. 

Corrigan asserted that 
developers should run unit tests 
on the installation piece of the 
application as they would on 
the rest of the code. "Installa- 
tion requirements are tricky," 
he said. "A lot of development 
teams think installation is noth- 



ing more complicated than zip- 
ping [an application] up in a zip 
file and throwing it out there." 
The module, which begins 
at US$399 per seat and is 
sold in packs of one, five or 10, 
will work with the company's 
InstallAnywhere software early 
in 2006, Corrigan said. 

KEEPING PACE 

The goal of the late November 
release of InstallShield 11.5, 



'If you're not thinking 
about how to go to 
market early in the 
process, you're going 
to have problems.' 

—Bob Corrigan, product 
manager for InstallShield 

including the multiplatform 
edition, was simply "to keep 
pace with Microsoft and Visu- 
al Studio 2005," according to 
Corrigan. 

The release adds support 
for .NET Framework 2.0 
and MS Build, and can 
convert Microsoft's new Click- 
Once Installer — a Web-based 
installation technology for 
users who need more on a 
client than is possible with 
pure HTML — to the more 
feature-rich MSI installation 
engine. I 



In 2005, Java Focused on Free and Easy 



BY ALEX HANDY 

The biggest news for Java 
developers in 2005 was the 
unveiling of Mustang, which 
will add to Java 6.0 early next 
year such long-awaited features 
as a new bytecode verifier, 
enhanced support for 
Web services and 
greater integration 
with XML. Also a 
long time coming was 
EJB 3.0, an update to the 
Enterprise JavaBean specifica- 
tion that cleaned up the clutter 
and tossed out a good deal 
of detritus, such as ejbPasivate() 
and ejbCreate(). This played well 
with the overarching theme of 
Mustang: ease of use. 

The Java community cele- 
brated its 10th anniversary in 
June, a month after the annual 




JavaOne conference took place 
in San Francisco. The word on 
the floor was that JCP 2.6 had 
solidified the process as essen- 
tial to the continued expansion 
and growth of the language. 
With Sun Microsystems' newly 
released J2EE specifi- 
cations now under 
I the watchful eye of 
the Java Community 
Process, the march 
toward ease of use through 
intense revision continues. 

Java developers in 2005 saw 
their art become cheaper and 
easier to produce. With 
Eclipse and Sun's Java Studio 
Enterprise environments both 
available at no cost, the IDE 
space for Java is certainly 
cheaper. 

The year also saw advances 



in Borland's fee-based 
JBuilder IDE, which added 
significant collaboration capa- 
bilities to make the actual 
development process a more 
social experience. 

But while the IDEs moved 
forward into a brave new 
world of interpersonal com- 
munication, Extreme Pro- 
gramming and lower costs, 
JBoss, IBM and Sun spent 
much of 2005 locking horns. 

In September, Sun and IBM 
began to butt heads over Har- 
mony, an open-source imple- 
mentation of J2EE, to which 
IBM is contributing code and 
Sun is contributing derisive 
laughter. At the end of that 
same month, JBoss announced 
that it would be cozying up to 
Microsoft to make its middle- 



ware more compatible on both 
sides of the operating system 
fence. Sun made a similar 
move earlier in the year at 
JavaOne and Microsoft's Pro- 
fessional Developers Confer- 
ence, where it announced that 
it would be working with 
Microsoft to better integrate all 
things .NET with all things 
Java. 

Playing well with others is 
key for Java as it evolves. And 
with Asynchronous JavaScript 
and XML, better known as 
AJAX, giving JavaScript a new 
lease on life, Java developers 
are now looking for ways to 
work with the venerable 
scripting language instead of 
ways to replace it. 

This sentiment was echoed 
by Eduardo Pelegri-Llopart, a 



distinguished engineer at Sun. 
"Something we learned from 
Struts was the value of having 
an out-of-the-box simple 
structure that gets you up and 
running very quickly. We have 
to be trying to learn that les- 
son. Maybe in the past we 
haven't learned that. That's the 
land of thing we're trying to 
learn now. It's always tough to 
find the right balance." 

That sentiment was borne 
out by the Java development 
community at large, as many 
time-saving frameworks ex- 
panded throughout the year. 
Most notable among these were 
Spring and Hibernate, both of 
which were taken in by BEA 
and IBM, which added support 
for these projects into their 
SOA platforms and IDEs. I 
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NEW PRODUCTS 
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TimeSys has made available two new LinuxLink subscriptions for 
developers creating custom Linux platforms targeting Freescale Semi- 
conductor's ColdFire MCF547x and MCF548x processors. The sub- 
scription includes the latest Linux distributions from Freescale; com- 
pilers, application and kernel debuggers and platform development 
tools; and participation in the online Developer Exchange . . . VA Soft- 
ware has launched SourceForge on Demand, a hosted version of 
SourceForge Enterprise Edition available on a project basis for small 
development teams or workgroups in large enterprises. It costs US$50 
per user per month, and additional projects can be purchased for $100 
. . . WebDesktop.NET, a collection of 12 GUI components for the cre- 
ation of Web-based applications targeting Microsoft's ASP.NET 2.0, 
was released in late December by Jakarta, Indonesia-based Intersoft 
Solutions. WebDesktop.NET, which is built 
on .NET Framework 2.0 and is tightly inte- 
grated with Visual Studio 2005, also 
introduces technologies such as XmlCompression and CssOptimizer 
for enhancing performance . . . VMware Player, a free release 
from VMware, enables the user to run, evaluate and share software in 
a virtual machine on a Windows or Linux system. VMware 
also announced it has partnered with Mozilla to deliver the Browser 
Appliance, a free virtual machine for Firefox that allows users to 
securely surf the Internet by automatically resetting the environment 
after every use, so personal information such as passwords are never 
stored permanently. 




UPGRADES 



SteelTrace has launched version 4.0 of its SteelTrace reguirements 
tool, which includes full baseline support with merge-forward and 
merge-back capability, advanced guery creation and filtering, auto- 
matic suspect trace links and e-mail notifications for review cycles 
. . . Dundas Software has released Dundas Diagram 2.0, with new 
features designed for developers reguiring advanced relational chart- 
ing for Web and Windows form projects. Included in version 2.0 is Visu- 
al Studio 2005 support, layout engines and dynamic scrolling for large 
Web diagrams . . . OpenLogic has launched ver- 
sion 3.5 of its BlueGlue Open Source Infra- 
structure Management Suite. It includes the 
ability to add to development projects user- 
selected open-source and proprietary software 
or third-party commercial packages, along with documentation and 
test suites. It costs US$399 per user on an annual subscription basis 
. . . GCC version 4.1 was released at the beginning of December, with 
numerous optimization features and enhancements to the integrated 
vectorization engine . . . BEA Systems has released JRockit 5.0, a 
new version of its JVM that now will be the basis for WebLogic Real 
Time. Features include numerous speed optimizations. 
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David Barnett joins Real-Time Innovations as VP of product manage- 
ment. With more than 20 years of experience in the real-time software 
industry, Barnett will oversee all product strategy, execution and man- 
agement functions for the company's product lines . . . Scott Miller 
has joined legacy system migration solution provider 
Sophisticated Business Systems as CEO and president 
. . . OpenLogic has named Stormy Peters as director 
of product management. She will be responsible for 
developing a product strategy and managing the 
expansion of OpenLogic's flagship product, BlueGlue, 
PETERS ' n t° * ne enterprise . . . Exadel, a provider of software, 
services and support that enable companies to create mission-critical 
business applications based on open-source and Java technologies, 
has announced the appointment of Andrew Komolov, a six-year 
Exadel employee, to VP of client solutions . . . George Walsh has 
joined BZ Media as special projects editor, and will be working on SD 
Times supplements and other programs. Walsh had been a contribut- 
ing writer to SD Times. I 





Sony Snafu Brings 
DRM to the Fore 



Sun leads the 
open digital ri 

BY ALEX HANDY 

The debate over digital rights 
management came to a head in 
November, thanks to a failed 
attempt by Sony BMG Music 
Entertainment to prevent the 
piracy of the works of several of 
its recording artists. Now, both 
the entertainment industry and 
the software industry are up in 
arms over just what went 
wrong, and are seeking ways to 
stop another DRM debacle. 

Sony's music division had 
installed the Extended Copy 
Protection (XCP) package from 
British company First 4 Inter- 
net onto a number of its audio 
discs during the summer and 
early autumn of 2005, including 
the latest releases from Celine 
Dion, Ricky Martin and Neil 
Diamond. The XCP DRM 
package is designed to prevent 
users from ripping the CDs 
audio tracks into MP3 format, 
and to stop the songs from 
entering a user's iTunes library. 

Unfortunately, the XCP 
software is not exactly subtle in 
its methodology. The software 
hides all processes beginning 
with "$sys$," a bit of obfusca- 
tion that was, within a fort- 
night, exploited by virus writ- 
ers to hide their own trojans on 
Windows systems. Sony subse- 
quently recalled its discs, 
though its newer DRM- 
enabled releases are now said 



charge with multiple 
ghts management projects 



to also be capable of molesting 
non-Windows systems. 

SONY BALONEY 

As if this weren't bad enough, 
bloggers around the Internet 
began dissecting the XCP 
DRM soitware, and soon dis- 
covered that it ran home to 
Sony's headquarters with sur- 
reptitiously captured informa- 
tion on its users. Others looking 
at the code also accused Sony 
and First 4 Internet of infring- 
ing on the Lesser GPL by using 
code from an open-source MP3 
encoding tool. 

During November, half a 
million computers around the 
world were infected with Sony's 
DRM software, and security 
researchers were publishing 
reports and infection maps that 
frightened businesses, govern- 
ments and even the U.S. 
Department of Justice. The 
state of Texas went so far as to 
sue Sony in late November, 
claiming it secretly embedded 
CDs with spyware. By the end 
oi the month, even the Penta- 
gon had been infected by the 
so-called Sony DRM spyware. 

Sony managed to make 
DRM a four-letter word among 
technophiles. But if Sun 
Microsystems has its way, it 
won't remain so for long. 

Glenn Edens, a senior vice 
president of communications 



media and entertainment at 
Sun and director of Sun Labs, 
has been working on DReaM, 
an open standards-based DRM 
implementation. While the idea 
of an open DRM standard may 
be strange, it's nothing com- 
pared with the types of applica- 
tions in which Edens sees 
DReaM being a factor. 

Edens maintains that an 
open-source DRM implementa- 
tion is no less secure than a 
closed one. "The fact is that hav- 
ing the source code or not hasn't 
been an obstacle to defeating 
most systems that are out there. 
Having your security source 
code open for view has made the 
software better," said Edens. 

Edens sees a bright future 
for DRM, and said that uses 
range from personalized man- 
agement to business uses to 
medical records to Sarbanes- 
Oxley compliance. Edens hopes 
that his company's open DRM 
initiative, embodied in DReaM, 
spreads to the entertainment 
industry at large, replacing out- 
dated and invasive systems like 
the one Sony used. 

But Ted Schadler, a vice 
president at Forrester Re- 
search, said that no matter how 
DRM is implemented, it's still 
taking something away from 
consumers. 

"You used to be able to do 
► continued on page 22 
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Testing Evolved, Security Stayed Specialized 



BY ALAN ZEICHICK 

When you consider the applica- 
tion life cycle, no part may be as 
controversial as software quality 
assurance — or as critical. Should 
tests be performed throughout 
the life cycle, as advocated by 



agile developers, or by a cadre of 
specialized test professionals in 
distinct phases, as in traditional 
waterfall-related methodologies? 
During the past year, the trend 
appeared to be toward integrat- 
ed testing throughout the coding 



phases, as the visibility 
of testing and QA con- 
tinued to increase. 

This may be most 
exemplified by Micro 
soft's gradual release of Visual 
Studio 2005 Team System. 




While many companies 
had long offered soft- 
ware test tools for 
Windows and .NET, 
Team System presented 
Microsoft's first steps into code 
profiling, static analysis, unit 
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to dynamically visualize all their Key Performance Indicators (KPI's) and 
other critical data in real time. 

With built-in data analysis and sophisticated visual customization abilities, 
Dundas' solutions offer a comprehensive feature-set for the quick creation 
of advanced Digital Dashboards. 

To download a full evaluation copy of any of Dundas' line of Data 
Visualisation Solutions, visit www.dundas.cQm. 
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testing and code coverage. 

That's not to say that Micro- 
soft controlled the testing agen- 
da in 2005 — far from it. Borland 
delivered Core SDP, its much- 
anticipated role-based software 
development platform for ana- 
lysts, architects, developers and 
testers. The Borland suites, 
which are built mainly from its 
existing products, offered tighter 
integration than previous releas- 
es. IBM continued evolving its 
bewildering array of develop- 
ment tools, some offered under 
the Rational brand, and others 
under the WebSphere Studio 
brand. These included stand- 
alone QA tools as well as full 
application life-cycle manage- 
ment suites with integrated test 
functionality. 

The open-source Eclipse 
platform also made strides in the 
area of software testing, as its 
Test & Performance Tools Plat- 
form project evolved to version 
4.0, with improved usability and 
features for finding perfor- 
mance bottlenecks, but added 
no significant new functionality. 
As more platform players, 
including BEA, Borland, IBM, 
Oracle and Sybase, rebuild their 
software on Eclipse, die impor- 
tance of these core functions will 
only increase. 

NEW AREA: SOA TESTING 

Both traditional and agile devel- 
opers found new tools and ser- 
vices covering two critical 
aspects of quality assurance: 
source configuration manage- 
ment and build management. A 
new area also arose: testing for 
service-oriented architectures. 
In some cases, this is more of a 
branding exercise than a tech- 
nology innovation: Parasoft, for 
example, renamed its SOAPtest 
software, initially created for 
measuring message compliance 
with the Simple Object Access 
Protocol, to SOAtest, and secu- 
rity firm Digital Evolution 
renamed itself to SOA Software. 
As a subset of software quality 
assurance, die field of software 
security remained dominated 
by a small number of mainly 
specialized firms. Smaller com- 
panies like Agitar, Cenzic, 
Compuware, Fortify, Kenai, 
Klocwork, Logic Library, NT 
Objectives, Ounce Labs, Para- 
soft, Pre-Emptive Solutions, 
Secure Software, Segue, SOA 
Software, SPI Dynamics and 
Watchfire control the discussion 
and advance the state of the art. I 
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Developers love creating code..* 
Managers crave process control... 
Bridge the gap with Seapine CM. 

Software development is a team effort with developers, festers, 
and management all working toward one goal - delivering the 
highest quality product on time, ^^^^^fi 



Built on award-winning TestTrack Pro and Surround SCM, 
Seapine CM brings structure to source control and issue 
management, improving communication white accelerating 
product development. 

Seaptne CM helps your team... 

Define custom change request workflows, putting you in control 
of who makes changes and who authorizes the closure of issues. 

Associate source code changes with defects or change requests. 



Cain a thorough understanding of how much work remains 
before project completion. 

View complete audit traiis of what changed, why, ond by w/ram. 

Understand how dose you are to release— how many issues are open, 
how quickly are you closing them, how many are re-opened? 

Successful team-based development requires the proper process 
supported by the right development tools. Tools that are 
flexible, easy to use, secure, and scalable— like Seapine CM. 



Features: 

Complete source code control 
with private workspaces, 
automatic merging, rde-based 
security and more. 

Comprehensive defect 
management— track change 
requests, bug reports, feature 
^quests and mare. 

Feat and secure remote access to 
your source files and defects 
—work from anywhere. 

IDE integration wtlh JBullrfer, 
Visual Studio, Eclbse. and other 
leading development tools. 

Advanced branching, triggers, 

email notifications, -uity 
configurable workflows, and 
customizable fides put you in 
complete control of your process. 

Open Interfaces— triggers, email 

notifications, SOAP support, XML 
dais exchange, and ODBC client*!. 

Scalable and reliable 
cross-platform, client/server 
soluttort supports Windows, Linux, 
Solans, and Mac OS X. 

Full Unicode support ol 
international characters across 
various languages ensures dais is 
not lost or misinterpreted. 



Achieve major improvements in software development performance through 
better tool integration and process automation. Manage defects, development 
issues, and change requests with award-winning TestTrack Pro and gain complete 
control over your source code and change process with Surround 5CM Sea pine's 
integrated change managemenl tools are feature rich, highly scalable,, Web 
enabled, and cross platform. Streamline your development process with Seapine 
CM and help /our team deliver quality software products on time, every time. 
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rjefscl Mtnjgemeni fh^X Automated Testing 



Learn more about the 

Seapine CM suite at 

www.seapine.com/sdtcm 

or colli -888-683-6456 
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Announcing Svncfusion Essential Studio 4.1 

Components that enable easy addition 
of value to your .NET applications 



Powerful new features 

■ Native support for .MET 2.0 

■ Support for Office 12 / Visual Studio 2005 look and feel 

■ ASP.NET products have been enhanced with AJAX support 
• All new grid-based scheduling control 

■ AJ1 10 Essential Studio products have major feature 
and performance updates 



Prepare for me future 

Essential Studio products are designed by industry 
leading architects Stefan Hoenig and George Shepherd. 

Our products are designed to evolve with the long term 
needs of your application. For instance, you can prepare 
for declarative user interfaces in the upcoming Windows 
Presentation Foundation using Essential HTMLUI. 



Rock solid products you can count on 

Our libraries are industry standards in several markets and 
are backed by our Direct-Trac support, 24 hours a day, 
seven days a week. 



Download our evaluation today, and see why many of 
the world's leading companies have standardized on us. 






sion.c 



888 9DOTNET 
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Innovations Draws 2006 Road Map for Visual Rules 

Linux support due this month; more updates, including auditing capability, due later this year 



BY JENNIFER DEJONG 

Innovations last month 
sketched out its 2006 plans for 
Visvial Rules, its tool for model- 
ing and managing business log- 
ic graphically. 

The Immenstaad, Germany- 
based company plans this 
month to release version 3.2.1, 
adding Linux support to Visual 
Rules. In the past, the tool's 
user interface has run only on 
Windows, said Innovations 
product manager Volker Gross- 
man. Later in 2006, the compa- 
ny expects to make further 
updates, adding, among other 
features, an auditing capability 
that lets policy managers look at 
the sequence of rules to see 
how a result was achieved, said 
Grossman. 

Like other rules offerings, 
Visual Rules separates busi- 
ness logic from application 
logic. This allows companies to 
update the policies that guide 
their businesses without 
requiring developers to alter 
an applications source code 
each time a change, such as a 
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The example shown depicts the business logic that determines which customers qualify for a promotional campaign. 



pricing promotion, is made. 

Visual Rules guides policy 
managers through the process 



of creating rules that imple- 
ment business policies, such as 
which customers are credit- 



worthy and how much credit 
to extend. The tool automati- 
cally generates Java or 



COBOL code, which develop- 
ers integrate with the target 
application, said Innovations 
marketing manager Stefanie 
Peitzker. Unlike competitors, 
Innovations' tool does not 
require the use of a dedicated 
rules server, she said. 

Visual Rules' soup-to-nuts 
graphic approach also differ- 
entiates it. "Everything is 
graphical — debugging, testing 
and documentation — not just 
modeling," said Peitzker. 

Also expected in Visual Rules 
later bus year is the ability to 
designate the time period for 
which a rule is valid, as well as 
support for metadata associated 
with a business rule (such as the 
name of the rule's author). 

Innovations also plans sup- 
port for JSR 94, an API that 
eases data exchange among 
competing Java-based rules 
engines. In November, the 
company added remote debug- 
ging capabilities to Visual 
Rules, allowing developers to 
debug the target application in 
which the rules are executed. I 



Does your Team do more than just track bugs? 



AlexsysTearn does! AlexsysTeam 2 is a multi-user Team management system that provides a 
powerful yet easy way to manage ll 1 1 the members of your team and their tasks - including defect 
tracking. Use Team right out of the box or tailor it to your needs. 



Download Vour 
Free Trial at 
www. alexcarp.com 
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Track all your project tasks in one database so 
you can work together to get projects done. 
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Download a free, no Obligation trial version at www.alexcorp.cDm 
Need mare help, give us a call at 1-8S8-SB0-ALEX (2539). 
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Eclipse Continued to Snowball in 2005 



BY EDWARD J. CORREIA 

It's hard to understate the 
importance of Eclipse to the 
software development industry. 
Who would have thought 
(except perhaps for a few really 
smart people at IBM) that an 



IDE framework would forever 
change the way tools used to 
develop software are built? 

There is simply no question 
that this is precisely what has 
happened. And developers 
have been flocking to it in 



droves. According to 
a developer survey 
conducted by BZ 
Besearch — a division 
of BZ Media, publisher 
of SD Times — nearly 63 per- 
cent of all Java developers use 



«m 



Eclipse as their prima- 
ry development envi- 
ronment. The same 
survey a year ago 
reflected that statistic at 
55 percent, and four years ago, 
fewer than half of Java develop- 



It's amazing 

what you can do with 
the right tool! 
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consummate m#. {kon-sum it, kon so- mot) 

1. Complete Or perfect In every respect 

2 . Supremely accomplished or skilled 

3. Complete 



i i i = i i s In objects, shapes, and graphics 
■Calt engine with 273 built-in formulas 

■ Cross-sheet referencing 

■Hferarchiaf views 

• Enhanced printing options 

'Column filtering 

■The most extensive feature set available 

-Wo runtime Of royalty fees 

-Free maintenance downloads 

-Unlimited email support 

-Unlimited access to FarPoInt support forum | 

-30- days of free phone support 



FarP^int 

www.fpoint.com 
or 1-800-645-5913 
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A project isn't quite right when you 
don't use the appropriate tool. The same is true 
for a ppfi cation development. Without the appropriate 
tool your application isn't quite right. Why waste the 
time with components that have less functionality? 
Spread is ail you'll need to get the job done right the 
first time. Spread is the consummate spread/grid 
development component. Log on towwwipoint.com 
to download a 30-day free trial and check out our 
other great products. 



Providing flexible, powerful and 
reliable solutions for your 

development needs. 



ers used an IDE at all. 

But the Eclipse community 
is far from finished; its develop- 
ers have spent 2005 working 
hard to improve the framework. 

For starters, Eclipse 3.1 was 
released. This major advance 
included support for J2SE 5.0 
and its annotations, generics and 
refactoring features. Version 3.1 
also included performance 
enhancements, both to the plat- 
form itself and to its ability to 
allow developers to more easily 
track the performance of exten- 
sions they are building. 

Platform 3.1 added support 
for links between preference 
pages that have related sets of 
preferences; a content type 
preference page for handling 
content type-file name associa- 
tions; and a capabilities prefer- 
ence page, for turning on and 
off sets of product features. 
Plug-ins can now be shipped as 
a single JAR file, rather than as 
a group of files. 

In addition, a multitude of 
major Eclipse projects were 
completed, including the Web 
Tools Platform, under which 
BEA, IBM, JBoss and Object- 
Web built tools to simplify 
J2EE, Web services and EJB 1.4 
deployment; the Tools Project, 
which includes the Eclipse 
Modeling Framework (EMF), 
Graphical Editor Framework 
(GEF), AspectJ and Visual Edi- 
tor (VE) GUI builder subpro- 
jects, the latter of which now 
supports SWT; and the Test and 
Performance Tools Platform, 
which streamlines integration of 
the JUnit open-source testing 
framework. 

Business Intelligence and 
Reporting Tools (BIRT) 1.0, 
released in June, lets Java devel- 
opers create business reports 
that can be viewed on the Web. 
Hand-coding of such reports is 
eliminated with Designer, a 
component that reads and trans- 
forms data into reports; Design, 
an XML file that specifies what 
reports the developer wants to 
run and in what format they are 
delivered (HTML or PDF); and 
Engine, which enables reports 
to be generated using the 
Report Object Model. Once the 
reports are created, developers 
or business users can update 
them to reflect changes in busi- 
ness data. BIRT is currently at 
version 1.0.1; release of version 
2.0 was expected by Dec. 30. 

The Eclipse idea is working 
exactly as IBM had intended. I 
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Speaking of Languages 

'Beyond Java' author says the language's 
days of dominance are numbered 




BY JENNIFER DEJONG 

Author and consultant Bruce Tate 
believes that Java is the most success- 
ful programming language ever. It 
redefined the way developers package 
and deliver software, and changed the 
way they build Internet applications 
and feel about interpreted languages. 
And by factoring deployment and 
management into the overall equation, 
Java also changed the economics of 
application development, he said. But 
in his new book, "Beyond Java" 
(O'Beilly Media), Tate argues that 
because other languages do a better 
job of solving certain programming 
problems, Java is not likely to maintain 
its dominance. 

SD Times asked Tate why that's so — 
and what languages he sees as possible 
replacements. 

SD Times: In the preface to the book, 
you write: "For many of the most com- 
mon problems that we solve with Java, 
some other frameworks in other lan- 
guages can already do a better job." 
For example? 

Bruce Tate: Let me give you two exam- 
ples, one on the low end and one on 
the high end. The problem we solve 
with Java most frequently is this: Put a 
Web-based user interface onto a typi- 
cal relational database. If your devel- 
opment team controls the database 
schema, then Buby on Bails solves that 
problem much more quickly than Java 
does, and with better support for some 
featvires like AJAX, which provides 
more powerful Web-based user inter- 
faces. And concurrency is another. 
We've long known that a family of lan- 
guages called functional languages 
solve concurrency better than Java 
does. A language called Erlang is com- 
ing into favor for solving [problems of] 
highly concurrent, distributed, fault- 
tolerant systems in industries like tele- 
com. Java's protection from concurren- 
cy bugs is primitive in comparison. 
Your book talks about the "crown jewels" 
of Java. What are they? 
Java's crown jewels, or the most 
important features for Java moving 
forward, are the community and the 
virtual machine. The Java community 
has consolidated more developers 
than ever before, and has allowed us 
to put major trust in open-source soft- 
ware. The Java Virtual Machine gives 
us a ubiquitous, portable platform. 
Both ideas are tremendous steps for- 
ward. But to establish that community, 
we had to make compromises early on, 



svich as embracing C++ syntax and 
other C++ features, like primitives. 
Should Sun release Java to the open- 
source community? 

I think it would help, but it doesn't 
necessarily solve the problem. We've 
got pretty big cultural momentum 
here: We like to solve the hardest 
problems, and are willing to boil the 
ocean to solve them. It's often better to 
back off, put out a simpler solution, 
and then make the frameworks flexible 
enough to adapt to the harder prob- 
lems. 



In "Beyond Java" you say that Ruby 
makes some of the hard things in Java 
easy. For example? 

Buby is just a higher-level language. 
Bather than expressing a loop, you can 
build that loop into a number. That fea- 
ture is called closures. It's important 
because we deal with so many kinds of 
collections, like databases and XML 
documents, which make us loop often. 
Another important feature, called con- 
tinuations, makes it easy to write Web 
applications using an easier stateful 
model, but with stateless scalability. It 
sounds strange, but trust me, the advan- 
tages are incredible. 
In the book you compare the process of 
building Web apps to that of making 




Second, the Java language needs 
aggressive rework. How do you main- 
tain backward compatibility? If you 
choose not to, how can you push Java 
hard enough to make the changes you 
need, but be gentle enough to maintain 
your community? Both seem difficult to 
me. A better strategy is to open vip the 
JVM, and make it possible for dynamic 
languages (open classes and dynamic 
typing) to vise the JVM, and all of the 
goodness in it. 

Is Microsoft C# a potential replacement 
for Java? 

Bight now, I'd call it more of a Java 
clone, but it is evolving faster than Java. 
But all in all, I think we'll need a fresh 
start, and one on a platform that doesn't 
lock us in as much to a single vendor. 
What about Ruby? 

It will take more than one language or 
idea to defeat Java, but I think Buby is 
a language that's got a lot going for it. 
It's a higher-order language with great 
abstractions. It's got a catalyst in a pop- 
ular framework called Buby on Bails. 
And it's experiencing explosive growth. 



sausage: "I like the result, but I don't 
want to see how it's made." Can you talk 
about that? 

Web development is hard because we 
need our programs to be stateless, so 
they can scale. There are too many 
users to have hard-coded conversations 
between each client and server. State- 
less programming is like having a con- 
versation with a thousand people at the 
same time, and having to write all of 
the relevant details on an index card for 
any given conversation to remember 
the details. You can do it, but it's not 
fun. It's an awful way to code, because 
each tiny little fragment of the conver- 
sation must remember the details. 

There are better ways. You can 
write programs that appear to be state- 
ful to the programmer, but are stateless 
in terms of scalability. A framework 
called Seaside is giving Smalltalk a 
much needed facelift again. It's like 
having your personal assistant working 
the party with a thousand people, whis- 
pering in your ear the relevant details 
for every person that have come up in 



Bruce Tate 



past conversations. It sounds very pro- 
ductive, and it is. 
What will a new language need to succeed? 

A whole lot of things. The biggest is a 
catalyst. Languages can't grow slowly to 
prominence. You just can't attract 
enough of a community without having 
the existing community. It's a chicken 
and egg problem. But if you have some 
catalyst, some application or frame- 
work that transcends the language, you 
can experience rapid growth. That's 
how C grew (Unix), and also Java 
(Netscape) and C++ (object-oriented 
programming). 

Tool makers are promoting IDEs that 
manage design, coding, testing and oper- 
ations in a single offering. Will so-called 
life-cycle IDEs gain wide adoption among 
corporate developers? 
I'm a little bit skeptical. The problem 
is that programmers make thousands 
of tiny improvements throughout the 
day, and the biggest breakthroughs 
come from generalizing a bunch of the 
tiny improvements. With Model Dri- 
ven Architecture tools, you are at a lev- 
el that's too high to see the improve- 
ments. And verbal communication is a 
powerful and expressive idea. Do we 
write in pictures? Generally no. ..the 
ideas are not easy enough to general- 
ize, and abstract ideas are harder to 
express that way. 
What's the next big thing? 
More likely, we're going to see a whole 
lot of next little things. 

We've been fortunate or unfortu- 
nate for a while, because there's been 
an incredible consolidation of program- 
ming languages. Fortunate, because it's 
easier to manage teams and projects 
that way, and it's much easier to make 
decisions. Unfortunate, because we're 
getting into a bad rut, believing that one 
language is appropriate for every prob- 
lem. We lose tremendous productivity 
that way. But we may never see such an 
incredible group of catalysts line up 
behind a language again. We had the 
Internet explosion, a backlash against 
C++ for certain problems and a similar 
backlash against Microsoft. We also had 
the emergence, or the maturity, of 
object-oriented programming. So Java 
was timed veiy well, and executed very 
well. 

What language do you work in today? 
I'm aggressively retooling my business 
[Austin, Texas-based consultancy 
J2Life] to do Buby, specifically Buby on 
Bails. 

A number of Java visionaries that I 
know are moving in the same direction. 
I'd say I do about two-thirds of my work 
in Buby now, and about one-third of my 
time is still spent in Java, mostly around 
the Spring framework. I 
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Real Software Makes Simple Work of SQL Apps 

Claims developers can target current installed base using RealBasic 



BY ANDY PATRIZIO 

Real Software, developer of the 
RealBasic IDE, is broadening its 
reach into the server space with 



a relational database called Real 
SQL Server 2006. The database 
is currendy in beta testing and 
planned for delivery in the first 



half of this year. 

RealBasic is an object-orient- 
ed BASIC compiler that Real 
claims is easier to use than 



Microsoft's Visual Basic, but has 
enough syntax in common that 
code can be ported from VB to 
RealBasic in a matter of hours or 
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days, depending on the complex- 
ity of the code. 

Real SQL Server 2006 is 
built on the SQLite technology 
Real acquired from SQLabs, a 
San Diego-based RealBasic 
solutions provider. 

According to Real president 
and CEO Geoff Perlman, advan- 
tages Real SQL has over MySQL 
and PostgreSQL are its simplici- 
ty of installation and building 
applications, and its cross-plat- 
form capability. 

RealBasic's strength lies in 
the fact that it's available on 
Windows, Macintosh and Linux 
platforms, and code written on 
one platform will compile on all 
three. Code will compile on any 
x86-based Linux distribution 
that has GTK+ 2.0 or higher, 
glibc-2.3 or higher and CUPS 
(Common Unix Printing Sys- 
tem), which is common to most 
Linux distributions. 

RealBasic comes with a small 
runtime database for single-user 
applications. That way, single 
user data-driven apps don't 
force developers to install a full 
multiuser RDBMS on a user's 
computer. Datafiles from this 
database are 100 percent 
portable to Real SQL Server 
2006, so single-user databases 
can be made available to multi- 
ple users, according to Perlman. 

"The initial target is our cus- 
tomer base, and they are already 
using the same database engine 
for single-user apps," said Perl- 
man. PostgreSQL and MySQL 
are strictly multiuser databases, 
so to build an application for a 
single user, like a customer data- 
base for a sales rep on a laptop, 
would require installing the 
whole MySQL or PostgreSQL 
database on the laptop. With 
RealBasic and Real SQL Server 
2006, a datafile from the SQL 
database can be copied to a lap- 
top and read by the RealBasic 
application — no database need- 
ed, he said. 

Regarding similarity between 
Real SQL Server 2006 and 
Microsoft's SQL Server 2005, 
Microsoft had no comment. 

Real has no performance 
benchmarks for its database as 
yet. Pricing will be announced 
at a later date. 

The beta is open to all Real- 
Basic customers with a current 
update plan at www.realsoftware 
.com/feedback. I 
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Overdue Updates, Delays Marked Microsoft's 2005 



BY ANDY PATRIZIO 

"Punctual" is not a word normal- 
ly used to describe Microsoft. 

Products promised for 2004 
finally were delivered in 2005, 
while other products promised 
for 2005 slipped into 06. Visual 
Studio 2005 shipped on Nov. 7, 
along with SQL Server 2005, 
BizTalk Server 2006 and version 
2.0 of the .NET Framework. 

The SQL Server 2005 up- 
grade was long overdue, as 
Microsoft had let its RDBMS 
go five years and allowed Ora- 
cle and IBM to gain ground. 
But Microsoft did make up for 
the delay with a lot of features: 
CLR integration, stored proce- 
dures in .NET languages, 
XML, integration with BizTalk 
Server and Commerce Server, 
business intelligence capabili- 
ties and more. 

Not making it to market in 
2005 was the ambitious Visual 
Studio Team System, Micro- 
soft's entry into the life-cycle 
management world. Although 
Team System had been due late 
in the year, only portions of it 
shipped in 2005. The underly- 
ing Team Foundation Server 
slipped to early 2006. 

RSS EMBRACED 

September saw Microsoft give 
RSS (Really Simple Syndication) 
a huge bear hug. The company 
promised to build support for the 
multiple versions of RSS into 
Vista, Internet Explorer 7 and 
Office 12. RSS is supported on 
an ever-increasing number of 
news Web sites, but by and large, 
the most popular RSS readers 
have been shareware/freeware. 
Microsoft has promised native 
RSS support in Outlook and 
Internet Explorer 7. 

Microsoft also is offering a 
pair of extensions to RSS, which 
it will release under the Creative 
Commons license. One will 
extend RSS list capabilities to 
add ordering information to a 
stream, so an RSS feed could 
better handle tilings such as e- 
commerce purchases. The sec- 
ond is a means of sharing contact 
and calendaring information 
between information servers, 
such as Exchange and Notes. 

Office 12, due around the 
same time as Vista (knock on 
wood), will include native XML, 
in theory opening Office data 
files to use in any application 
that can read XML. 

Collaboration is getting a 
boost in Office 12 with support 



for telephony, shared 
note-taking, Web con- 
ferencing, instant mes- 
saging, and secure, fed' 
erated access to public 
instant messaging networks, 
such as those of AOL and Yahoo. 




Microsoft also plans to 
offer servers for at 
least some of its appli- 
cations, starting with 
Excel. The Excel server 
will manage documents and 
offer enterprise content man- 



agement, as well as document 
life-cycle management, search- 
ing, security, business process 
and business intelligence. 

Microsoft did deliver one 
product on time, and many con- 
sumers wondered if it was worth 



it. Xbox 360, the second-genera- 
tion video-game console, hit 
stores in November, but it was a 
very rough launch, even by 
Microsoft standards. Supply was 
nowhere near demand, resulting 
in serious gouging on eBay. I 
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'If you are interested in 
writing more secure software, 
go to this conference." 

Richard Morris, Staff Firmware 
Engineer. Applied Bioay stems 



"Eye opening." 

Amy Haselhorst, 
QA Engineer. Ceridian 
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WebWork Merges With Struts 



BY ALEX HANDY 

The WebWork open-source Java 
Web application framework has 
merged with Apache Struts. The 
new combined project, which 
has been renamed the Struts 
Action Framework 2.0, will now 
focus on integrating the two pro- 
jects in preparation for the 2.0 
release early next year. 

Both frameworks are de- 
signed to ease the development 
of Web-based applications writ- 
ten in Java, and both focus on the 
ease of creating user interfaces, 
though Struts is primarily aimed 
at breaking up Web application 
development into an MVC 
(model-view-controller) model. 

"With this renewed energy, 
larger development team and 
larger community, the com- 
bined efforts of Struts and Web- 

Telerik Aligns 
Components With 
AJAX, VS 2005 

BY ANDY PATRIZIO 

Telerik late last year released 
radcontrols Q4 2005, the latest 
version of its ASP.NET applica- 
tion controls, adding five new 
components and upgrading 
three others. The update also 
adds extended AJAX capabili- 
ties to all controls and offers full 
support for Visual Studio 2005. 

At US$799 per user, radcon- 
trols are a series of components 
for building feature-rich, cross- 
browser compatible Web appli- 
cations. They support XHTML 
1.1 and WCAG Level A or 
higher accessibility. 

The five new components are 
radinput 1.0, for controlled 
data input in ASP.NET applica- 
tions; radcalendar 1.0, a light- 
weight calendar control with 
native AJAX support; radupload 
1.0, an AJAX-enabled multifile 
upload control that Telerik says 
minimizes server memory usage; 
radtoolbar 1.0, a component for 
implementing tool strips found 
in many Web applications; and 
radwindow 1.0, which replaces 
standard browser dialogs and 
alert/prompt/confirm boxes. 

In addition, the data grid 
control radgrid 3.0 now pro- 
vides ASP.NET 2.0 features, 
radcombobox 2.0 can include 
column headers and multiple 
columns in a dropdown, rad- 
callback 1.5 has been updated 
for faster performance and sup- 
ports cookieless sessions. I 



Work will surely make the Struts 
platform the easiest, fastest and 
most powerful Java Web frame- 
work available," wrote Patrick 
Lightbody, one of the lead 
developers of WebWork, in his 
blog. "We hope that all the Web- 



Work users and developers are 
as excited about this as we are 
and are ready to take WebWork 
to the next level." 

Ted Husted is on the project 
management committee for 
Struts, and is a member of The 



Apache Software Foundation. 
He said that the primary inno- 
vation of WebWork "is the 
HTTP independence. Some- 
thing that's problematic with 
Struts is we have references to 
HTTP in our signature. If you 



are depending on HTTP, it's 
very hard to test something out- 
side of a running container." 
Husted added that the merger 
will result in development that 
is not only faster but of a much 
higher quality. 

The combined project can 
be accessed at struts. apache 
.org/struts-action. I 
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All Sun Tools Now Open Source 



< continued from page 1 

Research, saw Sun's move as a 
good sign. "This is the first time 
they've really pulled it all 
together for a unified value 
proposition for the consumer. 



They hadn't done that before. I 
think that's a very positive 
development for Sun," he said. 
"I suspect that if customers 
come to understand it, they'll 
see that they pay Sun to get val- 



ue instead of just software." 

However, with Sun's track 
record, Rymer had reservations 
about how well-received the 
plan will be in the market base. 
"It's early I think, but Sun's 



been fairly frustrated with the 
prior moves they've made with 
the per-employee pricing and 
some of the subscription-based 
grid pricing," said Rymer. "The 
uptake among the customers 



"In some projects we have five simultaneous 
database environments to keep in synch. I 
downloaded the SQL tools from Red Gate and the 
next 1 4 days were the best SQL days in my life." 



G. Haraldsson Kaupthing Bank 



"SQL Compare and SQL 

Data Compare synched 

30,000 product lines and 

the 1 2 associated tables 

in less than 20 minutes - 

a task that takes the 

best part of a day 

manually!!! Go try it and 

buy it NOW." 



"I am literally staggered at how much more 
efficient it is to perform simple data transportation 
with SQL Data Compare. In some cases, it is up 
to 1 times faster with SQL Data Compare than it 
would be with DTS." 



Nick Stansbury SAGE Partners Ltd 



Paul Cooke Bortec IT Ltd 



"SQL Packager 

rocks! It took me 

longer to write this 

post than it did for 

me to copy a 

database located 

on a 3rd-party 

web host. 



"Simple to use, powerful, 
fast - awesome. I have never 
written a testimonial before, 
but I felt compelled to 
do so in this case." 



"SQL Compare and SQL Data Compare are 

the best purchases we've made in the 

.NET/S QL environment.. .We rely on these 

~^\ products for every deployment." 



Doron Grinstein Technical Director, 
Information Technology, Walt Disney Studios 



Paul Tebbutt Technical Lead Universal Music Group 



David Hayden codebetter.com 



It's awesome. The 
speed and interface 
improvements have 
made SQL Compare 
the central tool for our 
change control process." 



"There are times that I love 

this business - this would 

be one of them. Because 

without SQL Compare, and 

given 700 rows in sysobjects 

plus 1 3,000 rows in 

syscolumns in the 

production db, it would've 

taken me hours upon hours 

to find.. .Now, what to do 

with the rest of my day :-)" 

Mark McGinty Database Analyst/Consultant 



Marius Roets Woolworths 



The sound of 
productive developers 

The Red Gate SQL Bundle Developer Edition makes developers happy. 
Instead of wasting time writing tedious updates, they're creating time for the 
important stuff. IT Managers are even happier, because projects come in 
ahead of time and under budget. With our acclaimed tools you can automate 
all your SQL Server chores. Now, what to do with the rest of your day? 



■ql bundle 



Download your free, fully functional, 14-day trial 



www.red-gate.com 
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out in the market seemed to be 
very low. People don't seem to 
know about it, or they don't 
seem to believe it." 

Sun has tossed out its cus- 
tomer-based revenue model, and 
will now charge only for support 
and service like many open- 
source companies do. Instead of 
paying for subscriptions to Sun's 
Java Enterprise System, users 
will now pay for subscriptions for 
support and services based on 
these tools. The actual tools 
themselves will be available free 
of charge, thus allowing develop- 
ers to build their systems and 
test diem before having to pay. 
Rather than sell the software, 
Sun will rent its brains to cus- 
tomers and help solve their 
problems directly using a multi- 
tiered support program. 

Tim Bray, co-editor of the 
XML standard and a vice presi- 
dent at Sun, said that JES will 
also feature JavaDB, the data- 
base formerly known as Cloud- 
scape, aka Derby. Bray said that 
the addition of this already 
open-source Java database to 
JES brings an embeddable 
database to Sun's portfolio. In 
November, Sun announced that 
PostgreSQL would be added to 
Solaris, and Bray said that Der- 
by's 2MB memory footprint 
would give developers a range 
of options. 

The new business model, 
said Rymer, is a great change 
for enterprises, but he hopes 
enterprise customers pay atten- 
tion this time. "Why wouldn't 
you look at this? It's much more 
attuned to the reality. So you 
pay when you actually deploy 
something. How cool is that? 
How many projects fail [before 
deployment]?" said Rymer. "I 
hope they'll look at it. IBM, 
BE A and Oracle aren't going to 
start to respond unless their 
sales people start jumping up 
and down saying, 'We're losing 
money because of this.' " 

It could take a while for Sun 
to see the results of this move, 
said Rymer. The company has 
only just announced its transi- 
tion, and has not yet settled on 
a license for some of the tools. 
Solaris is licensed under Sun's 
Common Development and 
Distribution License (CDDL), 
which like the Mozilla Public 
License, allows users to modify 
source code for their own 
use without the redistribution 
requirements mandated by the 
GPL. 

Source code for Sun's stor- 
age software will remain closed, 
said a Sun spokesperson. I 
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Our flagship pioduct line. The result 
oF more than a decade of research 
and development in building Internet 
connectivity tools For professional 
software developers. 

Components for; 

Web and Web Services, Email ynd 
News, Fie Transfer, Sockets and 
Streaming, Remote Access, Instant 
Messaging, SSL and Secure Shell Se- 
curity, Certificate Management & Cre- 
ation, S/Mlme Encryption, SNMP Net- 
work Management, File & Streaming 
Compression, E-Business (626) 
Transactions. 



The IBiz product line provides small 
and medium-sized companies with en- 
terpnse-dass software components for 
Internet business integration. Built on 
top of our award winning IP*Woriks! 
tools, these easy-to-use components 
enable developers to easily Integrate 
common small business processes. 

Components for : 

Accounting Integration (QuickBooks), 
Credit Card Processing, ACH / E-Check 
Processing, Shipping and Tracking, 
Banking and Financial Transactions 
(OFX), PayPal Merchant Services, 



The /n software adapters extend Mi- 
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communications, security, and e-busJ- 
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nighty scalable, fully integrated imple- 
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cure communications protocols. Certi- 
fied by Unisys and cBusinessReady for 
performance and interoperability. 
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Open Office Data Formats Could Enable Innovation 



< continued from page 1 

Professional Developers Con- 
ference in September. In 
November, the company said it 
would open the file formats by 
submitting them to Ecma, 



which would develop the docu 
mentation and make it available 
to the industry. 

In September, Massachu- 
setts mandated use of only non- 
proprietary document formats 



in state-affiliated offices, effec- 
tive Jan. 1, 2007. The state 
went so far as to specify which 
formats it would use: Adobe's 
PDF and the Open Document 
Format for Office Applications, 



or OpenDocument. 

The state has backed off on 
this specificity, which McNabb 
said went too far, since Open- 
Document has barely any pres- 
ence in the industry. "An indus- 
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Easy to Use 



ActiveReports features an easy-to-use, banded, fully Integrated 

report designer with built-in wizards, Integrated toolbars, report 
and field explorer window, print preview with bookmarks and 
thumbnails, a full-featured chart control, and a detailed help file. 
With ActiveReports, it is easy to create the kinds of reports you 
need-from the most basic to the most complicated reports. 






Down Jo ad a Free Evaluation 

www, datadynamics.com 

Standard: $589 perdevefoper, royalty fee 
Professional: $1499 par developer, royalty free 



Easy to License 



Licensing wilh ActiveReports for .MET is straightforward and easy 
to understand. There are no hidden costs, no extra licensing fees 
and no royalties charged for end users. Once you install the 
product after purchase, you are free to create and deploy your 
reports as needed. 
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Easy to Deploy 



ActiveReports makes deploying your reports and end-user 

reporting capabilities easy. The reporting engine is provided as 
a single managed, strongnamed assembly. ActiveReports allows 
assemblies to be distributed using XCopy or placed in the Global 
Assembly Cache JGACJ. 
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try standard needs two things: 
A standards body needs to say 
it's a standard, and it needs to 
be adopted. OpenDocument is 
not pervasive yet." 

Instead, Massachusetts is 
giving Microsoft's Open XML 
plans its blessing. Gov. Mitt 
Romney recently issued a 
statement saying, "The com- 
monwealth is very pleased with 
Microsoft's progress in creating 
an open document format. If 
Microsoft follows through as 
planned, we are optimistic that 
Office Open XML will meet 
our new standards for accept- 
able open formats." 

Office has supported XML 
since Office 2000 but not very 
well. Only now is the XML 
specification ripe enough for 
use as an alternative to the 
binary data file formats, said 
Alan Yates, general manager of 
information worker business 
strategy at Microsoft. 

By using XML instead of 
the binary file formats, devel- 
opers can use the documents 
in all kinds of applications 
without requiring a conver- 
sion. There are plenty of 
Office document readers and 
converters, but the documents 
can only be read, not changed 
or written to. 

XML allows developers to 
"go into the contents of a docu- 
ment and incorporate the con- 
tents into your line of business 
data," said Yates. "So it opens up 
documents in a manageable, 
machine-readable, software- 
interoperable way." 

McNabb agreed on this 
point. "The market is pretty pro- 
ductive now with these formats, 
but that productivity is limited 
to certain needs. If I create a 
document, it's pretty much 
locked away in that binary for- 
mat. I can share it, but can't do 
anything else. 

"With an open document 
format," he continued, "you can 
really unlock the info itself to 
drive many more things." 

Microsoft submitted the 
file formats to Ecma in early 
December. Ecma approved 
the creation of a technical 
committee to standardize the 
Office document formats, 
although IBM voted against 
the committee. There is no 
word on when the Ecma body 
would formally approve the 
file formats. Office 12 is due in 
late 2006. I 
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servers, and Web services). 

► Use the development environment of your choice, including 
Java™, .NET, COM, and C++, and deploy applications on a 
variety of platforms. 

► Access and manipulate data in multiple formats. 
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Population demographics analysis application 




Web-based property management system 





Using GIS components within a commercial IDE 
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Smartbear Brings 
Collaboration To 
Peer Code Review 



r.i, !rm ^.-, ...-.^i--, 



BY ALEX HANDY 

Reading over the code writ- 
ten by colleagues can be a 
laborious process, but when 
done properly, it can save 
time for both developers and 
testers. To help organizations 
better review their code, 
Smartbear Software has cre- 
ated Code Collaborator 1.0, a 
Web-based tool that inte- 
grates with version control 
software to allow developers 
to check up on each other's 
code in real time. 

Jason Cohen, CEO of 
Smartbear, said, "There are 
several problems with peer 
code review that we solve. Are 
developers even doing re- 
views? If you're just sending 
code around by e-mail, how do 
you know if all the code in 
there has been looked at? 



What if defects are found? Are 
they actually fixed?" 

Another problem, he said, 
is that differencing tools nor- 
mally used by developers to 
perform this time-consuming 
task don't provide any context. 
"People require some sort of 
report coming out of code 
reviewing, and that takes time 
away from developers," Cohen 
said. "The third big thing is in 
reporting and metrics. Are 
your reviews efficient? Are 
you able to find this kind of 
problem very efficiently com- 
pared to QA?" 

Cohen described an exam- 
ple scenario. "You take some- 
thing like a null pointer excep- 
tion, like you iorgot to check 
for null. Code review finds this 
straight away, and it's an easy 
fix. In QA, if you find a null 




Code Collaborator adds a real-time aspect to version control systems, such as CVS and commercial offerings. 



pointer exception, you don't 
know where in the code the 
initial problem was caused. It 
takes a lot longer to find out 
where the problem is." Code 
Collaborator would display 
such errors through its metric 
reporting, he said. 

Cohen said that Code Col- 



laborator functions much like 
a private messaging system or 
a forum. Users can sign into 
the Web application and add 
comments in real time, or if 
users are scattered around the 
world, they can leave com- 
ments for later review by oth- 
ers. The system integrates 



with version control software 
of all sorts, from Perforce to 
CVS, and can pull down previ- 
ous iterations of code for 
review alongside the current 
code. 

Version 1.0 of Code Collab- 
orator is language-agnostic, 
and costs US$389 per seat. I 



Sony Anti-Copying Scheme Draws Attention to DRM 



4 continued from page 6 

anything you wanted with your 
CD," said Schadler. He advised 
that companies should be up- 
front about DRM, and label 
their media with information 
about what consumers can and 
cannot do. 

This, said Edens, means that 
DRM needs to offer the cus- 
tomers a benefit if it is to 
become accepted. "There has 
to be consumer benefits to the 
content owners and the distrib- 
ution channels for engaging in a 
DRM system. Using a network- 
based system that was up-front 
and exposed to everyone, and it 
got you access to special con- 
tent on the Web site, would be 
an example of this." 

To this end, Sun has released 
two new open-source projects to 
the public, with two more com- 
ing: Java Stream Assembly and 
DRM Opera have just entered 
the public domain, and early this 
year Sun hopes to make the 
Sun Streaming Server and the 
DReaM toolkit, used to append 
its DRM to media, available as 
well. Sun has also begun to team 
up with Deutche Telecom, and 
has had numerous offers from 




These images were generated from an external DNS cache by DoxPara Research, which surveys Internet traffic. Red areas represent DNS reguests for 
domains to which Sony's DRM software sent its information. It is estimated that at least 568,200 servers were affected in November. 



open-source developers looking 
to contribute to the DReaM 
toolkit, which should be avail- 
able next spring. 

THE FLAW IN DRM 

But even with an open solution, 
current concepts of DRM are 
fundamentally flawed, said 
Cory Doctorow, a science fic- 
tion author who has frequently 
commented on the subject. 
Doctorow gave a speech to 
Microsoft's Research Group 
last June, and in it he argued 
that the fundamentals of cryp- 



tography make DRM pointless, 
useless and doomed to failure. 

"Alice wants Bob to buy 
'Pirates of the Caribbean' from 
her," said Doctorow in his 
speech. "Bob will only buy 
'Pirates of the Caribbean' if 
he can descramble the 
CSS-encrypted VOB — video 
object — on his DVD player. 
Otherwise, the disc is only use- 
ful to Bob as a drinks coaster. 
So Alice has to provide Bob — 
the attacker — with the key, the 
cipher and the ciphertext. 
Hilarity ensues." 



Doctorow asserted, "DRM 
systems are usually broken in 
minutes, sometimes days — 
rarely, months. It's not because 
the people who think them up 
are stupid. It's not because the 
people who break them are 
smart. It's not because there's a 
flaw in the algorithms. At the 
end of the day, all DRM sys- 
tems share a common vulnera- 
bility: They provide their 
attackers with ciphertext, the 
cipher and the key. At this 
point, the secret isn't a secret 
anymore." 



But Edens isn't so pessimistic 
about DReaM. He maintains 
that while DRM isn't perfectly 
secure, it can still work, as long 
as it doesn't force users to cir- 
cumvent it in order to use tire 
product normally. "We've start- 
ed a very fruitful dialog with the 
EFF [Electronic Frontier Foun- 
dation]. We have been working 
on a white paper to describe a 
possible solution to the fair-use 
issues. The hard question is: 
'How can you have an access 
and authentication system that 
also respects fair use?' " I 
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DaVinci Code Does Heavy Digital Lifting 

Tl ships first development board, SDK with advanced multicore processor 



BY EDWARD J. CORREIA 

Texas Instruments in Decem- 
ber released the Digital Video 
Evaluation Module, the first 
product based on DaVinci, 
its configurable multicore 
processor unveiled in Septem- 
ber that TI says will simplify 
development of applications 
for streaming live video and 
other media to handheld 
devices, automobiles and set- 
top boxes. 

The DaVinci circuits com- 
bine TI's TMS320C64x+ DSP 
with an ARM926 application 
processor, additional pro- 
cessors for USB, ATA and 
video encoding and decoding, 
10/100 Ethernet MAC and 
memory and storage interfaces 
tuned for video. The DM6443 
decoder (US$29.95) and 
DM6446 encoder/decoder 
($34.95) are sampling now, 
and are scheduled to be avail- 
able in production quantities 
in mid-2006. 

According to Huy Pham, 
TI's marketing manager for 
DaVinci products, the new 
chips not only cost about half 
as much as the equivalent 
functionality of discreet cir- 
cuits, but offer far greater flex- 
ibility. "You could [build] a 
device that performs a specific 
function, but there's no way to 
innovate upon that," he said, 
speaking of an approach that 
uses separate application- 
specific integrated circuits 
(ASICs). "And if you go into an 
FPGA, it's flexible but not very 
efficient," he said, referring 
to field-programmable gate 




A DSP abstraction layer does 80 
percent of the work, according to 
TI's Pham. 



array-based designs. "We com- 
bine [the two] to make it easy 
for developers by giving them 
the flexibility of both." 

The $1,995 Digital Video 
Evaluation Module, or DVEVM, 
includes a DaVinci-based de- 
velopment board, LCD display, 
video/audio input and output 
connectors, network interface, 
an NTSC/PAL video camera 
and MontaVista Linux Pro- 
fessional Edition and board 
support package. 

ABSTRACT THINKING 

But the real innovation, Pham 
claimed, comes in the form of 
on-DaVinci code. Included is a 
digital media API that links to 
a DSP abstraction layer and 
codec APIs that according 
to Pham give developers 
access to all DSP functions 
without requiring any knowl- 
edge of digital video program- 
ming. "Digital video requires a 
lot of heavy lifting. With our 
hardware and software, 80 
percent of the work is done. 
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On-chip software in the DaVinci configurable processor Smm: " 

makes all DSP functions available to non-DSP programmers, says Tl. 



This allows enterprise cus- 
tomers [to] more easily get 
started with their application 
to implement video and to 
innovate." 



This is accomplished, he 
explained, by mapping the 
standard Linux API calls for 
video, audio and Ethernet, for 
example, to the DSP. "So if 



you're a developer only famil- 
iar with industry recognized 
APIs for desktop Linux, you 
can write an application for an 
embedded system that uses a 
DSP without programming 
the DSP. It is transparent to 
the programmer." 

And from an application 
running on the ABM proces- 
sor, an API call of "play video" 
will create an instantiation on 
the DSP and set up all the 
memory mapping to make that 
media playback happen. 

DaVinci developers benefit 
further, Pham said, by the 
unit's integrations. "The cor- 
rect hardware and software 
peripherals are already on the 
chip and tested and running 
digital video," as are the 2.6.1- 
based Linux and device dri- 
vers, he said. "This saves 
months of development time 
and testing." 

TI plans to release the ker- 
nel's source code as well as 
that of most of the APIs, he 
said. I 



In 2005, an Appeal 
For Embedded Unity 

Eclipse, Linux still play key roles; RFID emerges 



BY EDWARD J. CORREIA 

If Eclipse is the sun for the 
software development solar 
system, then embedded tools 
developers are certainly its 
inner planets. It's difficult to 
think of an embedded company 
large or small that is not 
involved with — if not deeply 
committed to — the framework. 

Indeed, Enea CEO Johan 
Wall in September went as far 
as to call a truce for embedded 
tools development companies 
in an effort to draw coopera- 
tion around Eclipse. 

Meanwhile, Wind River Sys- 
tems' Device Software Develop- 
ment Platform (DSDP) pro- 
ject — which will extend the 
Eclipse framework for embed- 
ded development — has spawned 
two subprojects: Target Man- 
agement and Device Debug- 
ging. Both are thriving; a 
Mobile Tools for Java subpro- 
ject has been proposed. 

Wind Biver also released an 



a la carte version of VxWorks 
that it says can exist in a 35KB 
footprint, an improvement 
of about 100KB. The Lego- 
like BTOS is a first for the 
industry veteran. 

Wind Biver's strategy is 
now deeply entrenched in Lin- 
ux. Flush with its first prof- 
itable quarter since 2001, the 
company early in the year 
dived headlong into open- 
source development efforts, 
released its own Linux distrib- 
ution and appears to have 
regained control of its destiny. 

Linux in embedded has 
made other huge strides as 
standards arbiter Open Source 
Development Labs has joined 
the ranks of organizations 
developing specs for using Lin- 
ux in handheld devices. Its 
Mobile Linux Initiative has 
held several meetings — so far 
mainly in Asia — focused on 
standardizing such things as 
boot speed, memory footprint 



and security for mid- and high 
end mobile phones. The orga 
nization also took over 
Platform Specifica- 
tion 1.0 from the 
now-defunct Embed- 
ded Linux Consortium 
which defined three embed- 
ded Linux profiles using POSIX 
subsets and the Linux Stan- 
dards Base. 

Both POSIX and LSB will 
play a role in MLI's specs, said 
OSDL. The MLI will work 
closely with existing groups 
such as the CE Linux Forum, 
which itself made strides this 
year in boot time and power 
consumption specifications; 
and the Linux Phone Stan- 
dards (LiPS) Forum, a new 
effort spearheaded this year by 
France Telecom and joined 
recently by Orange and Palm- 
Source. 

And on the subject of Palm- 
Source, does anyone recall the 
excitement in early 2004 when 




the company announced that 
Palm OS would run on Linux? 
The cornerstone of Palm- 
Source's strategy — the acquisi- 
tion in late 2003 of China 
MobileSoft — seems all but a 
memory by now. But Linux is 
still central to the strategy 
at PalmSource, now a subsidiary 
of Access, the Japanese mobile 
content and Internet tech- 
nology developer. The 
acquisition was com- 
pleted in November, 
but Access has not yet 
commented further on 
its broader intentions for the 
maker of Palm OS. 

The year 2005 also was a 
watershed period for Badio Fre- 
quency Identification (BFID), 
the technology that many 
believe was foisted upon the 
industry by a mandate from 
retail giant Wal-Mart. 

Once the domain of just a 
few niche players, BFID tech- 
nology is offered or supported 
today by mainstream tools 
companies, including BE A, 
IBM, Microsoft, Sun and 
Sybase. The movement was 
further spurred by advance- 
ments in tagging and wireless 
reader standardization efforts 
of organizations such as EPC- 
Global. I 
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M-Business Anywhere Gets Web Service-Savvy 

Sybase adds SOAP API to mobile Web site synchronization tool 



BY EDWARD J. CORREIA 

Sybase mobile division iAny- 
where has rewritten the man- 
agement console in M-Business 
Anywhere, making room for a 
new SOAP API that the compa- 
ny says now permits developers 
to control all functions of the 
server from within their pro- 




Rebuilding the administration 
console this way was a no-brainer, 
says Sybase's Ungersma. 



grams. Version 6.0 of the Web 
site synchronization technology 
for mobile devices was released 
on Dec. 6. 

According to Diana Ungers- 
ma, iAnywhere's senior product 
manager, the SOAP API pro- 
vides a simplified way to inte- 
grate mobile applications with 
back-end systems. "Web ser- 
vices are supposed to be an easy, 
standards-based way to do inte- 
gration. And as Web services 
have grown in popularity, it was 
a no-brainer to do it this way." 

Enterprise developers can 
now access user directories 
through the SOAP interface; 
prior versions were limited to 
Active Directory and LDAP 
"This lets developers pull a list 
of users from one source and 
send it to another system for 
back-end integration of M- 
Business Anywhere with an 



ISV's product or enterprise sys- 
tem," Ungersma said. 

Pricing for M-Business Any- 
where 6.0 remains at US$69 to 
$299 depending on whether the 
application requires simple 
Web-data updates, uses form- 
based input and synchroniza- 
tion or requires integration 
with a SQL database. A free 
evaluation version is available 
at www.ianywhere.com/avantgo 
/developer. 

ISVs and enterprise develop- 
ers can rebrand the console or 
embed it within other consoles. 
"This is of particular interest to 
companies with [for example] a 
salesforce automation product 
that doesn't have a mobile 
client," she explained. "Now 
they can add a mobility compo- 
nent to [the salesforce automa- 
tion application] without having 
to be mobile experts." 
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All management functions can now be controlled programatically, says Sybase. 



Synchronization efficiency 
has been improved in version 6, 
Ungersma claimed, through 
optimizations in server caching. 
"We provide guidelines for 
which caching to use depending 
on the platform and whether 
content is constantly changing or 



remains static." Client software 
upgrades now can be performed 
over the air. "Administrators 
don't want the end user to have 
to run an installer. This way the 
IT department has control, and 
they can remotely push new 
clients out to devices." I 



Getting a Grip on Multicore Communications 

Industry to standardize specs for debugging heterogeneous environments 



BY EDWARD J. CORREIA 

If there was uncertainty as to 
whether multicore processors 
would catch on, this should 
remove all doubt: An industry 
consortium has emerged to 
standardize interprocessor com- 
munications and debugging. 

According to founder Mar- 
cus Levy, the Multicore Associa- 
tion (www.multicore-association 
org), formed on Nov. 30, has 
generated interest from major 
chip makers, including ARM, 
Intel, Freescale Semiconduc- 
tor, MIPS and Texas Instru- 
ments, as well as from program- 
mable logic makers ARC and 
Tensilica. "We've actually been 
meeting since May as an ad hoc 
association. We wanted to see 
what kind of interest we could 
drum up and see if we had 
a charter." Levy is founder and 
president of the Embedded 
Microprocessor Benchmark 
Consortium. 

With the exception of 
Freescale, no other chip maker 
has yet to pony up the 
US$6,000 membership fee, 
but "operating system guys are 
all over this," Levy said, and 
have already begun generating 
IP under three working 
groups. Being led by Wind 
River Systems CTO Tomas 



Evensen is the Transparent 
Inter Process Communications 
(TIPC) group, which will for- 
ward the efforts on that spec 
by Ericsson, Nokia, QNX, 
Wind River and others. 

The multitasking and com- 
munication API working group 
is being led by Jim Holt, man- 
ager of the systems modeling 
and software enablement 
group at Freescale; and repre- 
sentatives from PolyCore Soft- 
ware and Ignios, both of which 
make multicore development 
tools. A third group will focus 
on EDA, and will be headed by 
electronic design automation 
tools maker Imperas. 

One of the big-picture goals 
the groups will try to achieve, 
Levy said, will be to create 
common ways of displaying 
and synchronizing debugging 
information coming from dis- 
parate processor cores in the 
same chip. "Although [the 
cores] probably do the same 
things, they don't speak the 
same language. So we're trying 
to get them to work together to 
display [debug results] in a 
common way." 

Compounding that prob- 
lem, he said, will be instances 
when two cores, like or unlike, 
are running two different 



operating systems. "Say you 
have one running Linux and 
one running QNX. How do 
you get QNX to talk to one 
running Linux? Our goal is to 
define the communications 
APIs to support that." 

As if that weren't enough 
complexity, multicore designs 
often also contain MPEG 
accelerators, DMA controllers 



and other peripheral devices. 
To help avoid confusion, the 
groups have taken to referring 
to processors of any kind as 
work entities, Levy said. 
"Because they are all there 
working, the trick is to get 
them to work together. TFs 
been doing it for years, but 
[TFs solutions are] propri- 
etary. The world moved 



toward heterogeneous envi- 
ronments." TI is engaged, but 
has not yet committed to the 
effort. 

The next step for the associ- 
ation, Levy said, will be to write 
a set of bylaws and put them 
before an interim board for 
review. He could not provide a 
list of board members or a 
timetable. I 



Qtopia on the Road With VoIP, WiFi 



BY EDWARD J. CORREIA 

With the intention of helping 
developers build phones that 
can detect the least-expensive 
available network in a given 
area, Trolltech late last year 
included Linux-based voice- 
over-IP capabilities in Qtopia 
Phone Edition 2.2, the latest 
version of its GUI and applica- 
tion framework for mobile 
computing devices. 

"We started seeing a trend 
toward VoIP on cell phones 
about a year ago, particularly in 
Asia," said Trolltech CEO 
Haavard Nord. "Typically this 
will be for WiFi [enabled] 
handsets, and not primarily for 
cell phones," he said, but added 
that the technology also would 
be suitable for enhancing an 



existing cell phone design. "So 
when you're in a WiFi area, you 
can use the VoIP capabilities" 
to save on wireless charges. 

Nord said that although the 
framework is based on KPhone, 
an open-source session initia- 
tion protocol (SIP) client for 
Linux, it remains flexible. "Our 
infrastructure is pluggable, so 
you can plug in different VoIP 
engines and SIP stacks." And 
according to Nord, it's unique. 

The Qtopia platform pro- 
vides a suite of customizable 
applications for small-footprint 
devices including PIM, tele- 
phony, e-mail, media playback 
and streaming. The software 
works with displays as small as 
176 x 208 pixels at 24 bits per 
pixel, and a variety of input 



devices is supported. 

Qtopia Phone Edition 2.2 
now supports transparent win- 
dows and devices with dual dis- 
plays, which Nord said is com- 
mon on so-called clamshell or 
flip-phones. "You can have a 
second display on the back of 
the part you flip, which shows 
who's calling. So it's useful for 
the phone to control both 
screens." Version 2.2 improves 
performance and includes 
enhancements to the user inter- 
face and multimedia and inter- 
nationalization capabilities . 

Available now, the SDK is 
licensed under the GPL and 
works with a minimum of Linux 
2.4 and GCC 2.95. Per-device 
royalty pricing is unchanged, 
starting at around US$2. I 
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EDITORIAL 

The New Openness 

For-profit organizations give away expensive assets 
only when they believe this generosity gives them a 
competitive advantage. So, what's the best way to inter- 
pret Microsoft's moves regarding the Open Office format, 
and Sun's decision to give away its developer tools? 

In the case of Microsoft, the company has been grad- 
ually opening its file formats for several years. Historical- 
ly, the binary file formats used by Word, Excel and Pow- 
erPoint were considered to be core intellectual property; 
Microsoft successfully resisted attempts by third parties 
to reverse-engineer .DOC, .XLS and .PPT files. Yes, 
some third-party applications could do a reasonable job 
importing and exporting those formats. However, the 
bewildering complexity of those document formats 
helped Microsoft formats turn Office into the over- 
whelmingly dominant player in the business productivity 
market. 

The increased popularity of XML drove Microsoft to 
incorporate the nonbinary format with Office 2000, but 
this was a nondefault format, and the company still con- 
sidered the new format to be its intellectual property. 
Despite a Web site pledging not to sue developers who 
use the format, the use of XML wasn't enough to satisfy 
some users, including governmental bodies that didn't 
want their document repositories to be locked into a 
proprietary file format. Thus, the latest move was to sub- 
mit the XML schemas for the forthcoming "Office 12" to 
Ecma International, a vendor consortium that can fast- 
track the formats to ISO, a standards body. 

Will standardization through ISO satisfy enterprise and 
government users that the Office formats are open? Per- 
haps — but don't forget about "embrace and extend," 
Microsoft's tendency to proclaim the openness of its plat- 
forms while adding on proprietary extensions that seduce 
customers into lock-in. We don't yet know what new fea- 
tures might appear in "Office 12" — or in subsequent 
releases — that would extend the Open Office schemas in 
ways that go beyond whatever Microsoft has chosen to 
give to Ecma and ISO. 

So, while Microsoft's current initiatives are welcome, 
we urge developers to wait and see if the company's 
future behavior matches its current rhetoric. 

Sun's recent decision to give away its developer tools is 
both more transparent and more curious. For a year or 
more, Sun has been aggressively giving away its software 
assets, including Solaris 10, its application servers and 
now its tools. It seems that Sun is flailing around to find 
a strategy that works. 

Sun tried licensing its software on a per-employee 
basis; that didn't get traction. It tried giving away server 
software to sell more of its server hardware; that didn't 
get much traction either. 

Now it's hoping to adopt the classic open-source 
business model: Give away the code, and charge for 
support subscriptions. That works only if developers 
find the software to be compelling — no matter what the 
price — and if they see benefits in signing up for paid 
support. 

Given that NetBeans, the foundation of Sun's new 
open-source tools, is a distant also-ran in the Java tools 
space, it's uncertain whether the new license and pricing 
will inspire coders to beat a path to its door. I 



IT Architect Certification Standards 



The role of the IT architect 
has been steadily evolving 
in the past decade: from a focus 
on designing applications and 
then systems, to a role that 
is much more tightly linked 
to the success of the business. 
Like building architects, much 
of their work is focused on the 
front end of the solution 
life cycle: listening to clients, 
understanding their business 
requirements and systematically 
forming incrementally more 
detailed definitions of the struc- 
tures of an information technol- 
ogy solution — an architecture. 

And while their job scope 
has evolved, the way their skills 
are standardized and evaluated 
hasn't. IT architecture is not yet 
recognized as a profession in its 
own right, but it should be. To 
that end, the Open Group has 
launched the ITAC (IT Archi- 
tect Certification) standard for 
a complete definition of the 
rapidly expanding IT architec- 
ture profession. Now, IT archi- 
tects who have real skill and 
experience-based qualifications 
can be backed up by a rigorous 
certification program. 

DEMAND FOR SKILLS HIGH 

IT decision makers say that 
they need people with more 
than just knowledge — they 
need demonstrable practiced 
skills and a track record. Orga- 
nizations that provide and train 
IT architects report that 
demand is high; however, 
experienced and skilled practi- 
tioners are not receiving the 
recognition that should be 
accorded. 

IT architects need proven 
competencies across a variety of 
disciplines straddling business, 
strategy and strong understand- 
ing of IT. These include basic 
systems analyses encompassing 
the scope and migration issues 
as well as a comprehensive 
knowledge of the burgeoning 
legislation in this area, the 
many technical standards that 
are being published and the 
related compliance claims of 
vendors. 

Knowledge of appropriate 
governance models and of 
architectural frameworks such 
as TOGAF and the Rational 
Unified Process (RUP) adds to 
the demands on practitioners to 
the extent that already we are 
seeing a need for differentia- 
tion of roles into areas such as 



enterprise, information, infra- 
structure and application archi- 
tecture. Also essential are peo- 
ple skills to liaise with the 
business process experts and 
the technical implementers. 

One reason the IT industry 
faced the dot-bomb was the 
lack of linkage between busi- 
ness and technology acquisi- 
tion — or, the general lack of an 
architectural vision. Many orga- 
nizations purchased large quan- 
tities of IT products without 
thinking about how the tech- 
nology would support the 
business vision or enable busi- 
ness processes — both at enter- 
prise and application 
architecture levels. 

Without support 
for the development 
of an enterprise archi- 
tecture, there was I 
very little direct link- 
age between business 
processes and related ^^ 
business applications. I 
For enterprises with I WmW 
multiple systems — If Vt. 
which is the case in most compa- 
nies — this also implies a lack of 
information architecture vision 
and an end-to-end systems inte- 
gration architecture. As a result, 
many companies have been sad- 
dled widi a lingering technology 
hangover. 

For many enterprises, the 
cure has been the effective 
implementation of enterprise 
architecture (EA). Ry linking EA 
to IT project funding, companies 
and governments have aligned 
IT acquisitions to successful IT 
project implementations. 

IT ARCHITECTS' EVOLUTION 

As early as 10 years ago, most 
IT architects were solely 
focused on application-level 
design and implementation. 
Recently, organizations have 
come to realize increased pro- 
ductivity in linking the imple- 
mentation of IT systems to 
their mission by enabling the IT 
architect to better understand 
the business itself. 

The IT architect role and 
position within many organiza- 
tions has only recently been for- 
malized by some organizations. 
This is especially true of the 
role of the enterprise architect. 
Recause well-implemented IT 
architecture is crucial to suc- 
cess, the means to identify the 
appropriate experts becomes 
equally important. 




Meta Group has noted these 
developments, and in a recent 
paper has predicted that the 
demand for IT architects and 
the introduction of a definitive 
professional body will be 
met — by 2007. However, the 
industry needs more immedi- 
ate action. 

THE PATH TO CERTIFICATION 

IT decision makers brought the 
issue to their meetings within 
The Open Group, an interna- 
tional consortium bringing 
together end users, vendors and 
other industry experts. The 
result: the Open Group IT 
Architect Certifica- 
tion Program (Open 
Group ITAC), an 
open standard for 
accrediting an orga- 
nization's IT archi- 
tect certification pro- 
gram that establishes 
a baseline for IT 
architect skills and 
experience against 
which individuals are 
measured. 

The standard establishes two 
paths to certification: either 
directly through the Open 
Group, or via an organization, 
such as the company they work 
for, that has obtained ITAC 
accreditation of their internal 
certification program. 

The ITAC is an extensible 
framework that allows for cul- 
tural, industry-specific and 
proprietary extensions referred 
to as extended certification 
requirements. The framework's 
flexibility allows for extensibili- 
ty while ensuring that a certifi- 
cation candidate meets base- 
line requirements in order to 
be recognized as certified 
at one of the three different 
levels of certification: Certified 
IT Architect, Master Certified 
IT Architect and Distinguished 
Certified IT Architect. 

Certification specialization 
in architecture disciplines will 
be added to the program over 
the next year. These include 
enterprise architecture, infor- 
mation architecture, infrastruc- 
ture architecture and applica- 
tion architecture. 

The Open Group IT Archi- 
tect Certification program certi- 
fies IT architects that meet an 
open standard for skills and 
experience. The program in- 
cludes direct certification of 
applicants as well as a process 
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and a set of criteria for accredit- 
ing an organizations internal 
certification programs. By de- 
fining criteria for recognizing 
certified professionals, it also 
sets the foundation for estab- 
lishing a recognized IT architect 
profession. 

In their applications for cer- 
tification, candidates are re- 
quired to describe their work 
experience in detail to show 
they meet the skills and experi- 
ence requirements defined 
for the program. Certification 
boards will consist of Certified 
IT Architects who will evaluate 
applications via the documenta- 
tion candidates provide as well 
as through board interviews. 

The program establishes an 
industiy standard baseline that 
provides the following benefits: 

• A recognized certification stan- 
dard to help ensure the further 
development and recognition of 
the IT architecture profession. 

• Measurements against the 
same baseline criteria through- 
out the industry thereby estab- 
lishing a standard for the use of 
the title Certified IT Architect. 

• Certification credentials that 
are granted to the individual and 
remain with the individual as 
long as that individual maintains 
his or her status as a practicing 
IT architect. 

• Credibility to organizations 
that accredit their certification 
program. 

• A means for companies to val- 
idate certification credentials 
through the Open Group ITA 
certification repositoiy. 

• Organizations developing safe- 
ty- and mission-critical appli- 
cations may require Certified IT 
Architects to lead the design of 
important systems. This pro- 
gram provides a means to iden- 
tify qualified architects. 

• Academic institutions can use 
the skills template defined by 
the framework to develop cur- 
riculum to strengthen IT archi- 
tect education. 

The IT industry has been 
using the word "architect" in 
their job titles for decades, but 
only now do we have an oppor- 
tunity to add some rigor to this 
title. We should seize this 
opportunity and create a pro- 
fession that people can under- 
stand and trust — before legisla- 
tors decide they know how to 
do it better. I 

Andras Szakal fa chief architect of 
IBM's Federal Software Group. 
He's aho a Senior Certified IT 
Architect and member of the 
Open Group board of directors. 



Letters to the Editor 



RUNTIME ISSUES 

The article "Where Are the 
Rich Internet Applications 
Written in Java?" [Dec. 1, page 
30] exposed several problems 
with Java, especially the run- 
time issue. At one time I had 
three versions of the Java run- 
time on my PC. Finally one Java 
app which I needed to use 
would not run since I had 
installed the latest Java runtime. 
It couldn't figure out that I had 
the correct version installed. Is 
this a design issue or poor cod- 
ing? Why do I have to run three 
versions of the Java runtime on 
my PC? Whatever happened to 
backward compatibility? 

Java issues are also hard to 
troubleshoot. I've spent the last 
several months troubleshooting 
ColdFusion MX 6.1, which runs 
on Java. What a nightmare. 
With the move to Java, ColdFu- 
sion requires a lot of tweaking 
and Java troubleshooting. 
Doing stack traces and pouring 
through Java logs is a mess. 

The final kicker with Java is 
the versioning and naming. 
There are a hundred versions 
with different names; Java run- 
time, HotSpot, JDK, J2EE, 
etc.... the list goes on and on. I 
guess the marketing folks at 
Sun enjoy coming up with new 
names. Is it JDK 5.0 or 1.5.0? 



Who knows? 

Java suffers from reality. 
While they marketed it as being 
fast and easy to easy to port, it 
doesn't. 

Mike Prest 

Chicago 

OLD UNRELIABLE 

Regarding the Guest View by 
Steven J. Vaughan-Nichols in 
the SD Times News on Thurs- 
day newsletter ["Lies, Damn 
Lies and the Internet," Nov. 
24], I fear that society's trust in 
the accuracy of Internet infor- 
mation is worse than what you 
suggest. 

I recently graduated from a 
university where my professors 
allowed research papers to be 
totally comprised of references 
taken from the Internet. I nev- 
er had to "prove" the accuracy 
of my information at all via 
referring to a formally printed 
and cataloged reference. Refer- 
ences could be and often were 
taken from Wikipedia sources, 
e-zines and the like. 

Thankfully, I have 25 years' 
experience in information sys- 
tems development so I have sig- 
nificant real-world credentials 
to back up my academic creden- 
tial; however, companies are 
hiring people from this universi- 
ty as technical professionals. 



The graduates of this university 
have a piece of paper that says 
they completed course require- 
ments; however, the usefulness 
of their knowledge in my mind 
is seriously in question. 

As our society moves more 
and more toward a digital 
online world, it scares me to 
think that some doctor some- 
where received his/her educa- 
tion in an environment where 
knowledge obtained online is 
used to make life and death 
decisions. I develop intranet- 
based engineering information 
systems for an automotive com- 
pany. I see the data taken and 
have a stake in its accuracy from 
creation to destruction. In this 
intranet environment, there is a 
level of credibility with respect 
to the accuracy of the informa- 
tion published. In the wide- 
open spaces of the Internet, I 
would never consider informa- 
tion accurate without validating 
it across multiple independent 
reference sources. 

Mark Haase 

Product Engineer 

DaimlerChrysler 

Letters to SD Times should include the 
writer's name, company affiliation and 
contact information. Letters become the 
property of BZ Media and may be edited. 
Send to feedback@bzmedia.com. 



Are You Making More Money? DATA WATCH I 

Application programmers received the biggest raises from 2004 to 2005, according to the 2005 Salary Survey, 
published by Enterprise Systems, an online publisher for the mainframe and server markets. 

The increase represented an average bump of 6.6 percent for the group that is defined as those who write 
and test code. The increase was the highest in a group of IT staff that included systems programmer and sys- 
tems analyst positions and their managers, whose salaries all declined this year. The only other non-adminis- 
trators seeing a raise were programmer analysts, who develop applications and environments; they saw a 2.2 
percent increase, on average. 

The survey polled 1,170 enterprise IT sites across a broad range of industries supporting Windows (78 per- 
cent), Unix (45 percent), Linux (30 percent), mainframe (28 percent) and midrange systems (23 percent), 
mainly IBM iSeries. 
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The Changing Face of Open Source 



The term "open source" may evoke a 
romantic image of programmers 
working late into the night on projects 
that have caught their interest. In the 
footsteps of Richard Stallman and Linus 
Torvalds, they selflessly toil away, con- 
tributing their work freely to the greater 
good, both in binary and source code 
form, all the while forgoing any remu- 
neration. This enduring and endearing 
image, alas, is steadily losing any con- 
nection to the real world of open-source 
products as they exist today. And under- 
standing the differences is key to finding 
your way around the open-source land- 
scape, as we'll see shortly. 

First, the reality. Open-source pro- 
gramming today is almost entirely a 
commercial affair. On most projects, the 
majority of the code is written by full- 
time developers whose employers are 
interested in providing support to a spe- 
cific project. 

Earlier this year, I attempted to find 
out exactly how much these paid devel- 
opers contribute when compared with 
independent contributors. I spoke with 
Marc Fleury, who heads up JBoss, the 
now-company that once built a full 
J2EE suite using the old-style communi- 
ty model with Fleury leading the effort. 



He told me that today, no more than 1 
percent of the code comes from inde- 
pendent developers. Mike Milinkovich, 
who leads the Eclipse Foundation, spec- 
ulated that the source-code contribu- 
tions of independents was even less than 
that. (But, he pointed out, independents 
do make terrific beta testers.) 

This shift from amateurs 
(in the word's original sense of 
doing something for the love 
of it) to paid professionals has 
several causes. 

The first derives from the 
complexity of programming 
today. Most developers must 
learn daunting codebases to 
find the routine to which they 
can add value. And even 
when they find it, making 
sure they are actually adding value is 
another complex process entirely. Only 
developers who really need the software 
feature have the motivation to conse- 
crate so much time and effort to making 
small changes. (Large feature changes 
are, in many cases, insuperably difficult.) 

Apparently easier tasks, such as pro- 
viding documentation, also require 
more effort than volunteer communities 
are willing to provide. As a result, you 
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get strange paradoxes, such as the 
Apache Portable Runtime, which is the 
portable C library that forms the basis of 
the Apache Web server and Subversion 
(as well as some other products). The 
library has never been documented, and 
so despite its many valuable features, its 
use is confined primarily to the develop- 
ers who wrote portions of it 
or who have an employer 
willing to pay them to learn it. 
The second — and impor- 
tant — reason for the com- 
mercialization of open-source 
products is that project man- 
agers far prefer to have devel- 
opers over whom they can 
exert control. This enables 
them to plan specific feature 
sets and release dates, rather 
than to hope that someone will con- 
tribute the needed code. 

This commercialization has distinct 
benefits: You get OpenOffice as opposed 
to tire incomplete AbiWord. You get enter- 
prise-grade threading support in the Linux 
kernel, rather than the various mixed 
approaches used previously. . .and so on. 

However, it has limitations as well. 
Notably it suggests the important ques- 
tion of how — perhaps even whether — 



any large, grass-roots, open-source pro- 
ject could thrive today. 

Research tends toward discouraging 
results on this point. In the past few 
years, most new code in the open-source 
community has come from existing 
codebases that commercial vendors have 
opened up (such as IBM Cloudscape, 
Sun Solaris and the like). 

A few projects, such as Firefox and 
Spring, are flourishing by themselves, 
but they are small in scale (certainly 
smaller than the L-A-M portions of the 
LAMP stack) and few in number. 

This commercialization of open 
source explains why a vendor's decision 
to release source code for a product in 
order to reverse its commercial slide 
generally does not have that effect. All it 
does is open-source the project. 

The commercialization also means, I 
believe, that the open-source aspect will 
no longer be much of an advantage for a 
product. Of greater importance will be 
the price (and here Stallman s distinc- 
tions between free code and open- 
source come into play), the feature set 
and the support from the vendor or, in 
the rarer cases, from the community. 
And when you think about it, aren't 
these the same criteria for closed- 
source, commercial software? I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. 



'Opening' Office XML 



Microsoft's "Open XML" announce- 
ment said it will submit to Ecma 
for standardization the XML schema 
that is the preferred file format for 
Office 12. There's been little discussion 
of the technical "facts on the ground," 
which reveal this as a cunning stroke on 
Microsoft's part. 

The large majority of comment on 
this announcement focused on political 
and legal issues. From a political per- 
spective, the chief take was that this was 
a direct response to Massachusetts' 
recent decision to remove Microsoft's 
binary Word format from the list of file 
formats that were acceptable for storing 
state documents. Microsoft says no, that 
it's pure coincidence that this bureau- 
cratic road bump in Massachusetts 
immediately preceded the grand culmi- 
nation of a years-long effort. Yeah, right. 

From a legal standpoint, the discus- 
sion has been whether Microsoft's license 
and, more important, its covenant not to 
sue "go far enough." 

In the weeks following the announce- 
ment, I was contacted by a potential 
client who asked me to help analyze the 
technical feasibility of constructing a 
word processor that consumed and gen- 
erated Open XML documents. I'll proba- 
bly be drummed out of the consulting 
guild for letting such a big fish off the 
hook, but on the other hand, life's too 



short to be associated with projects that 
will founder at the implementation level. 

What I told the client was that, to 
my mind, the file format for Word is a 
one-way function. Making documents 
parsable is a big deal, with lots of rami- 
fications, but those ramifications don't 
include "it is now possible to 
build a competitor to Word." 
Even if one anticipates the 
grandest possible Ecma com- 
mittee, producing an unam- 
biguous document that fully 
defines the "type" that is a 
Word document, the non- 
functional requirements of a 
word processor are enormous 
and obscure. 

Once upon a time in the 
mid-1990s, Microsoft got in trouble for 
having a set of undocumented APIs in 
Windows. One set of functions was a 
memory-management system that was 
tailored for the need of Word to deal with 
large chunks of memory. Once upon a 
time, I talked to someone who worked on 
the original version of Word for Windows 
about flickering during input. 

"Oh, sure," he said. "That's why we 
have multiple invisible windows that we 
move around with the insertion point, so 
we're only rapidly redrawing the lines 
we have to." There are probably hun- 
dreds, if not thousands, of significant 




hand-crafted optimizations within Word 
(and I would presume an uncountable 
number of profiler-guided tweaks). 

On the other side of the balance, it's 
possible that a talented team could pro- 
duce an architecture geared toward 64- 
bit multicore hardware, and by using the 
best practices of the "design 
patterns" and "agile develop- 
ment" eras, gain structural 
advantages. Sadly, though, 
they'd have to spend the vast 
majority of their time not pro- 
ducing a better word proces- 
sor, but recreating the page- 
breaking logic of a product 
they presumably disdain. 

"Page-breaking logic" is, 
to me, the main problem with 
the ebullience about Open XML. (Is 
Microsoft really going to get away with 
claiming such a great name?) For a real 
competitor to Microsoft Word to arise, 
the graphic on page 1,364 has to be in 
precisely the same place as Word would 
place it (and, too, an Excel replacement 
must produce the same rounding of a 
currency value derived from a thousand 
different formulas), and, in Word, page 
layout is a combination of absolute and 
derived values — Word XML does not 
specify "soft" line and page breaks. 

However, anything short of a precise 
cloning of Word's page-layout logic (or 



PowerPoint's transitions or Excels calcu- 
lations) means incompatibility to the 
broad market of users. This is what I 
meant when I told my client that Word 
is like a one-way function: It's easy 
enough to confirm that Word lays out a 
given XML document in a particular 
way, but it may be extremely difficult to 
achieve that mapping oneself, and if per- 
formance is integrated into the require- 
ments, perhaps impossible. 

This is not to say that it's impossible 
(or even hard) to imagine office-suite 
products that provide user experiences 
superior to those provided by Microsoft 
(with mail clients and browsers, one 
could point to existing products). But my 
question would be whether the efforts of 
a talented development team with the 
Open XML spec in hand would be better 
spent creating a slavishly compatible lay- 
out engine or creating new functions. 

Of course, the creation of such tools 
would likely increase, rather than 
decrease, the relative importance of 
Office as a central organizing applica- 
tion, just as the sudden popularity of 
"mash ups" has increased the relative 
importance of Google Maps. So, with 
one announcement, Microsoft took the 
wind out of the sails of Open Office, 
paid obeisance to the "standards" buzz- 
word, and strengthened the Office hege- 
mony. A cunning stroke indeed. I 

Larry O'Brien is a technology consul- 
tant, analyst and writer. Read his hlog at 
www. knowing, net. 
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A Bolshevik Take on Computer Security 



Zeicliick's Take in the Dec. 1 SD 
Times News on Thursday, one of 
this newspaper's regular newsletters, 
fretted about management's reluctance 
to pay to build secure systems. The col- 
umn, written by Alan Zeichick, SD 
Times' editorial director, quotes several 
programmers venting their frustration, 
and Zeichick points out (rightly) that we 
should all be worried about insecure 
applications. The problem is not a man- 
agement one, however, nor is it techni- 
cal. The problem is political. 

Consider identity theft. This problem 
is entirely soluble. The real issue is that 
no existing laws encourage credit card 
issuers to adopt secure practices — quite 
the contrary, in fact. If credit issuers 
(including the credit card companies) 
were required to verify a person's identi- 
ty before granting a loan, there simply 
wouldn't be an identity-theft problem. 

How do you verify identity? Think 
about how you open a checking account: 
You have to show up at the bank in per- 
son with some sort of legitimate ID, one 
that was based on some hard evidence 
that you're who you say you are — a state 
driver's license for example, augmented 
by some proof of address like a utility 
bill in your name. Driver's licenses can 
be forged, of course, but it's a lot harder 
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to do that than it is to steal a credit card 
application out of somebody's mailbox 
and scribble a new address on it. 

Identity verification is easy when the 
card issuer is your own bank, but what if 
you want a card from a different bank? 
The banks can use the same process that 
your browser uses when it decides to 
trust a certificate. Banks trust 
each other. It's not that diffi- 
cult for the card-issuing bank 
to require that you have a 
bank account somewhere, 
and then verify your address, 
etc., by contacting your bank. 
To get even more secure, the 
issuer could send a permis- 
sion form to the address on 
file with your bank and not 
issue the card until that per- 
mission (with the signature compared to 
the one on file at your bank) was granted. 

Unfortunately, our laws are written in 
such a way that the human cost of identi- 
ty theft (such as repairing trashed credit 
ratings) is borne by the victim, not by the 
card issuer, so the banks have absolutely 
no financial incentive to adopt secure 
issuance protocols. In general, corpora- 
tions have no conscience — their deci- 
sions are strictly economic. The corpora- 
tion doesn't care whether a computer 




system is technically "correct" or 
"secure" unless the cost of a breach is 
greater than the cost of the infrastruc- 
ture, with the odds of a breach factored 
into the equation. That's the way busi- 
nesses work. This isn't good or bad; it just 
is. Government's role in a corporate soci- 
ety is to add humanity to the cold calcu- 
lations of the accountants. 

A secure credit card issu- 
ance protocol is not rocket sci- 
ence, but it's expensive. The 
only way to get a corporation 
to incur this kind of expense 
is to make it more expensive 
not to do the vetting. For 
example, if card issuers were 
.fffiJjj fined $1,000,000 eveiy time 
they issued a card in your 
name without verifying your 
identity using a well-defined protocol, 
then I guarantee that they'd do the veri- 
fication. I'd be happy to throw in a $20 
application fee to help defer the cost. 

Now let's look at Web security and 
the like. We know how to make these 
systems secure, but the companies that 
own the sites don't want to pay for the 
security. Sound familiar? 

Since computer security in the gen- 
eral sense is also "national security" in 
the political sense, one could make an 



argument for a legal framework that 
forced all public-facing computer sys- 
tems to be secure. Consider the envi- 
ronmental laws. No company was willing 
to spend money on clean air until forced 
to do so, but it certainly benefits society 
as a whole (as compared with the indi- 
vidual companies) for these laws to be in 
place. In the long term, clean air bene- 
fits the companies too. 

The same argument applies to inter- 
net security. Think about the hit on the 
economy that's caused by hackers. It's 
huge. Ultimately, it's our tax dollars that 
are paying for the unemployment and 
other social ills that are part of the eco- 
nomic consequence. Put another way, a 
company that doesn't want to spend on 
security is actually just shifting the cost 
of the insecure system to you in the 
same ways that the banks have shifted 
the cost of identity theft to you. 

You cannot stop security breaches 
by attacking the attacker any more than 
you can stop theft solely by going after 
thieves after something has been 
stolen. There are always more thieves 
than cops. You can, however, require 
that companies take basic measures to 
guard their customers' valuables, and 
there's nothing more valuable than 
your identity. I 

Allen Holub is an architect, consultant 
and instructor in C/C++, Java and OO 
Design. Reach him at www.holub.com. 
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Thirteen is normally not considered 
a lucky number, but Oracle is hop- 
ing that that number of acquisitions in 
2005 gives the company a leg vip in sev- 
eral markets, including business appli- 
cations and identity and access man- 
agement. 

The takeover activity began for Ora- 
cle with the closing ol its high-profile 
and hostile acquisition of PeopleSoft in 
January for US$10.3 billion. 
But it certainly didn't end 
there. In April, Oracle out- 
lasted SAP in a battle for 
retail solutions provider 
Retek. That one set Oracle 
back about $500 million. In 
September, it announced it 
would acquire Siebel for $5.8 
billion, effectively reducing 
the number of companies 
offering CRM and ERP solu- 
tions to two giants — Oracle and market 
leader SAP — as well as Microsoft, 
which is coming on strong with its 
Great Plains software, now called 
Dynamics CRM. 

Other notable purchases by Oracle 
last year included Times Ten, Profit- 
Logic, Innobase, OctetString and Oblix. 
(The others were either out of the realm 
of developer interest or involved pieces 
of companies or their technology). 

The database giant, though, was not 
the only company to shell out big bucks 







in high-profile mergers and acquisitions 
last year. 

After the two big Oracle acquisitions, 
the next-largest deal was announced 
in May, when Adobe Systems indicat 
ed it would fork over US$3.4 
billion to buy Macromedia, 
developer of Flash rich-client 
animation and the FLEX fami- 
ly of Web application development 

tools. That deal, which came 
under some Securities and 
Exchange Commission scruti- 
ny after it was announced, 
finally closed on Dec. 5. The 
company said it now will 
get busy on its "strategic 
initiative to advance a power- 
ful software platform, based 
on PDF and Macromedia 
Flash technologies, that 
scales from mobile devices to 
high-end servers." 

Meanwhile, IBM spent US$1.1 bil- 
lion to acquire Ascential, which was the 
company that remained after IBM 
shelled out $1 billion to buy its Informix 
and Cloudscape database software and 
database operations in 2004. The result 
was that IBM spent more than $2 billion 
for a company that in 2004 had revenues 
of $271.9 million — and has since 
released Cloudscape technology to the 
open-source community. 

And in November, venture capitalist 




firm Silver Lake Partners said it would 
spend US$1.2 billion to take Serena 
Software private. Serena had made high- 
profile acquisitions of its own in previous 
years, picking up TeamShare and Mer- 
ant, and was struggling with the deep, 
seamless integration of all the products, 
it acknowledged recently. 

Last year also marked serious con- 
solidation in the host access and 
installer markets. Macrovision 
followed up on its 2004 acqui- 
sition of InstallShield with the 

July purchase of Zero G Software, giv- 
ing it cross-platform capability and a vir- 
tual lock on the installer market. The 
software also plays into the company's 
core strengths of software licensing and 
IP protection. 

The mainframe access market also 
shrank when Attachmate and WRQ came 
together under the auspices of a capital 
investment group led by Francisco Part- 
ners, Golden Gate Capital, Thoma 
Cressey Equity Partners and JMI. 

Even companies that analyze and 
report on the industry got into the act in 
2005. Analysis firm Gartner paid 
US$162 million to acquire rival Meta 
Group in January, two years after For- 
rester Research purchased Giga Group. 

And, BZ Media, parent company 
of SD Times, acquired the digital 
EclipseSource newsletter and two 
Eclipse-focused Web sites from Penton 
Media. I 

David Rubinstein is editor-in-chief of 
SD Times. 



OTHER PROMINENT PURCHASES 


Company 

Troux 


Focus 

IT governance 


Acquisition 

Computas NA 


Focus 

Enterprise architecture 


When 

February 


Terms 

$30 million 


Teleloqic 


Life-cycle tools 


Popkin Software 


Enterprise architecture 


May 


$45 million 


Sun 


Java, Unix servers 


Tarantella 


Remote access software 


June 


$25 million 


CA 


Network, security 


Niku 


IT governance 


June 


$350 million 


Sun 


Java, Unix servers 


SeeBeyond 


Composite applications 


July 


$387 million 


BEA 


Java, integration 


Plumtree 


Portal, content management 


September 


$200 million 


JNetDirect 

All figures in US dollars 


Data modeling 


Vanward Technologies 


Quality assurance 


October 


Not disclosed 




Microsoft might not be the most friendly company in the world to those organiza- 
tions that have tried to compete with it, but it is proving to be more friendly to the 
environment. Last month, Microsoft announced it would eliminate PVC packaging 
from products it ships by the end of 2005. When produced or burned, PVC — 
polyvinyl chloride — emits dioxins that have been found to be carcinogenic. 
Microsoft has taken the action with the help of the Center for Health, Environ- 
ment and Justice (CHEJ), based in Falls Church, Va. "A decision by a major corpo- 
rate leader like Microsoft to phase out PVC sets the bar for other corporations," 
said Lois Gibbs, executive director of CHEJ . . . Princeton, N.J.-based EPAM Sys- 
tems, provider of software engineering outsourcing, announced the launch of its 
first of several engineering centers in Ukraine, focused on engineering and guality 
and not on remote staff augmentation. The centers, which will extend the compa- 
ny's European presence beyond Hungary, Belarus and Russia, will help the compa- 
ny's growth. It plans to recruit at least 200 people in Ukraine before the end of 



2006. EPAM plans to set up the main center in Kiev, but said it will also establish 
two regional development centers to deliver software development projects pri- 
marily for clients in the EU and the U.S. . . . QA Labs last month announced it has 
acguired 30 percent of Critical Systems Labs, an engineering company that pro- 
vides expertise in the development of safety-critical, software-intensive systems 
for industries such as aerospace, automotive and emergency management. With 
the union of these companies, OA Labs, which claims to be the largest independent 
software OA and testing provider in Canada, now adds safety-critical software test- 
ing as one of its services. "Critical Systems Labs is delighted to partner with QA 
Labs," said Jeff Joyce, Critical Systems' founder and an expert in hazard identifica- 
tion and analysis. "We are pleased to be associated with QA Labs because it has a 
solid reputation as a guality testing outsourcing company and because the two com- 
panies can now take advantage of existing customers, partners and industry con- 
nections to grow both businesses." Financial terms of the deal were not disclosed. I 



CALENDAR OF EVENTS 



Macworld Conference 

San Francisco 
IDG WORLD EXPO 

www.macworldexpo.com 



Jan. 9-13 



Black Hat Federal 

Washington, D. C 
BLACK HAT 

www.blackhat.com 



Jan. 23-26 



VSLive Jan. 29-Feb. 2 

San Francisco 

FAWCETTE TECHNICAL PUBLICATIONS 

www.ftponline.com/conferences/vslive/2006/sf 



Developer 
Relations Conference 

San Francisco 
EVANS DATA 

www.evansdata.com/drc2 



Feb. 6-7 



Software Security Summit Feb. 6-8 

San Diego 
BZ MEDIA 

www.S-3con.com 



RSA Conference 

San Jose 
RSA SECURITY 

2005.rsaconference.com/us/C4P06 


Feb. 13-17 


Web Services/SOA Feb. 27 
On Wall Street 

New York 

LIGHTHOUSE PARTNERS & FLAGG MANAGEMENT 

www.webservicesonwallstreet.com 


SHARE 

Seattle 
SHARE 

www.share.org 


March 5-10 


Business March 6-8 
Intelligence Summit 

Chicago 
GARTNER 

www.gartner.com/2_events/conferences/bi4.jsp 


Emerging 
Technology Conference 

San Diego 
O'REILLY MEDIA 

conferences.oreillynet.com 


March 6-9 


Intel Developer 
Forum Spring 

San Francisco 
INTEL 

www.intel.com/idf/us/fall2005 


March 7-9 


SD West 2006 

Santa Clara 
CMP MEDIA 

www.sdexpo.com 


March 13-17 


BrainShare 2006 

Salt Lake City 
NOVELL 

www.novell.com/brainshare 


March 19-24 


EclipseCon 

Santa Clara 
ECLIPSE FOUNDATION 

www.eclipsecon.org/2006/Home.do 


March 20-23 


Game Developers 
Conference 

San Jose 
CMP MEDIA 

www.gdconf.com 


March 20-24 



For a more complete calendar of U.S. software devel- 
opment events, see www.bzmedia.com/calendar. 
Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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The Most Tightly integrated Data Visualization 
Tool Available for Visual Studio 2005 

PROOF US: The Chan FX for Visual Studio 200S Extensions Manager 
standardizes the Infrastructure for the installation or listing of the Chart FX 

Extension adchns This means easier integration and deployment of Chart FX 
Extensions into your enterprise applications The Chart FX Extensions are 
assemblies that allow Chart FX to adapt to verticals such as financial, 
statistical, maps and OLAR among others, The Chart FX Extension Manager 
The Chart FX for Visual Studip 20G5 u " s we ' J lef vioe<; to retrieve all installed and available ertensions from the 
Extension Manager. Software FX Extensrons Portal. Developers can then simply download a trial 

version and test the functionality before making any purchase decisions. 
learn more about the seamless inttgfetion and powerful features at 



Chart FX 

for Visual Studio* 2005 
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Get FREE the Essential Development Book Collection for Visual Studio 2005! 

Limitations apply - mora info at www.softwarefx.conn 



Ship Software OnTime 




ONTIME2006 

The Fast & Scaleable Team Solution for. . . 

Defect & Issue Tracking • Feature & Change Tracking • Task & To-do List Tracking • Helpdesk Ticket Tracking 

OnTime is the market-leading project, defect and feature management tool for agile software development and test teams. 
OnTime facilitates tracking, analyzing and trending team-based software development efforts in an intuitive and powerful user 
interface. A fully customizable Ul, powerful workflow, process enforcements, two-way email communications and custom reports 
combine to help software development teams ship software on-time! 

Available for Windows, Web & VS.NET 2003/2005 



OnTime 2006 Professional Edition 




• For Teams of 10 to 1 ,000 Members 

• From $1 49 Per User 



OnTime 2006 Small Team Edition 



For Teams up to 1 Members 
Free Single-User Installations 
$495 for 5 -Team Members 
$995 for 10-Team Members 




800-6530024 




software for software development" 

www.axosoft.com 



Only $495 for up to 5 Users • Only $995 for up to 10 Users 

Free Single-User Installations 



